Before operating AI responsibly, organizations must understand the systems and components they actually have.