That position is not sustainable, and it is also not solved by a policy document written in isolation. A policy without decision owners is a document; it changes nothing on Monday morning.
The Executive AI Governance Session exists to make the first set of decisions properly: in the room, with the people who hold the authority, written down afterwards in a form the board can read and a regulator could review. It is the smallest piece of real governance work an organization can commission, and for most it is enough to stop the bleeding while deciding whether a full assessment is warranted.