Has anybody explored / implemented a chatbot to help employees navigate information security policies and standards, be they business users, IT admins, DevSecOps people, etc.?

Yes, we are using the Moveworks platform and have incorporated this into our internal enterprise search/FAQ/Knowledgebase.

Yes. On premise only and in a sandbox. Meaning that it has a defined location it can go and is pentested to test whether people can use it to go into areas they are not allowed. We actively monitor with DLP, there is an acceptable use policy, and zero tolerance if used beyond the scope - partnered with HR for that.

Yes. have implemented with our IT ticketing system to know more about the organization policies