Most organisations already use AI assistants, with or without a policy. A general assistant knows a lot about the world but nothing about your documents, your customers or your systems. So employees copy information into the chat window. That puts the information where nobody keeps track of it.
The difference is big when the assistant gets to read from your own sources. With RAG it answers from the documents and shows the source. With MCP it can fetch information from the ERP or CRM system, with the same permissions as the user.
