How can organizations get the most from GenAI without getting duped?