Surface every tool in use, including the undocumented ones.
Assess value, access and data with the people who run them.
One verdict per tool, a named owner and a written policy.
About two weeks, depending on tool count. The review pack, one verdict per tool and the written policy land at the end.