Practical Guidance for Security Leaders on Securing and Governing AI