5 Steps to Governing Generative AI