AI governance should be ‘evolving process, not a one-time policy document,’ says expert