Security leaders need concrete AI guidelines to prevent risks.