The New Zealand Defence Force (NZDF) is currently drafting a directive on the acceptable use of generative AI, highlighting the importance of governance in the rapid deployment of such technologies. Despite rolling out Microsoft’s Copilot AI tools just eight months ago, the NZDF recognizes the need for more rigorous strategies to mitigate risks associated with AI usage, particularly concerning data privacy and user conduct. A risk assessment conducted a year prior identified a low to moderate risk profile for using Copilot, yet it emphasized the necessity for clear governance and monitoring to prevent potential issues from escalating.