Domain
AI
This directory contains organization-neutral AI governance, AI security, AI risk, lifecycle, documentation, evaluation, assurance, and register artefacts.
Note
Its original content is released under CC BY-SA 4.0; a quotation that NOTICE.md (opens in a new tab) allows or keeps under its transition clause keeps its source licence and is not relicensed under CC BY-SA 4.0.
Charter, 3
Charters
Policy, 1
Policies
- AI Compliance Policyv1.0.51
Framework, 8
Frameworks
- Agentic Response State Model Frameworkv0.0.4
- AI Assurance Evidence and Attestation Frameworkv1.0.10
- AI Governance and Risk Frameworkv1.1.9
- AI Maturity Model Frameworkv0.0.3
- AI Model Documentation and Transparency Frameworkv1.0.18
- AI Model Risk Frameworkv1.0.5
- AI System Audit and Certification Frameworkv1.0.26
- AI Value and Decision-Governance Frameworkv0.0.8
Standard, 10
Standards
- AI Access and Agent Permissions Standardv0.0.19
- AI and Agentic Development Security Standardv1.8.54
- AI Data Quality and Readiness Validation Standardv0.0.4
- AI Human-Oversight Standardv0.0.8
- AI Inference Cost Governance Standardv0.0.11
- AI Model Risk Standardv1.1.7
- AI Model Succession and Identity Continuity Standardv0.0.5
- AI Security and Risk Standardv1.1.9
- AI Testing, Validation and Documentation Standardv1.0.15
- AI Total Cost of Ownership Governance Standardv0.0.7
Procedure, 9
Procedures
- AI Assurance Case Procedurev1.0.6
- AI Audit Procedurev1.1.14
- AI Evaluation Procedurev1.0.16
- AI Model Lifecycle Management Procedurev1.0.12
- AI Model Risk Assessment Procedurev1.0.8
- AI System Impact Assessment Procedurev1.0.9
- Foundation Model Lifecycle Procedurev0.0.20
- Integrated AI and Privacy Assessment Procedurev0.1.6
- Training Data Governance Procedurev0.0.16
Guide, 3
Guides
Guideline, 3
Guidelines
Plan, 1
Plans
- AI Incident Response Planv1.0.13
Matrix, 2
Matrices
Register, 3
Registers
- AI Risk Registerv1.0.13
- Model Context Protocol Server Registerv1.0.14
- Model Registryv0.0.10
Checklist, 1
Checklists
Template, 7
Templates
- AI Assurance Case Templatev1.0.4
- AI Red Team Report Templatev1.0.14
- AI System Register Templatev1.1.5
- AI Vendor Security Questionnaire Templatev1.0.11
- Dataset Datasheet Templatev1.0.9
- Model Card Templatev1.0.7
- System Card Templatev1.1.5
Annex, 14
Annexes
- Australia AI Regulatory Requirementsv0.0.4
- California CCPA Automated Decision-Making Technology (ADMT) Regulatory Requirementsv0.0.6
- Canada AI Regulatory Requirementsv1.0.12
- Colorado AI and Automated Decision-Making Technology Regulatory Requirementsv0.0.4
- European Union AI Regulatory Requirementsv0.0.27
- Illinois AI in Employment (HB 3773) Regulatory Requirementsv0.0.5
- Malaysia National Guidelines on AI Governance and Ethics (AIGE)v0.0.10
- New York City Automated Employment Decision Tool Regulatory Requirementsv0.0.8
- Singapore IMDA Model AI Governance Framework for Agentic AIv0.0.3
- Singapore Model AI Governance Framework for Generative AIv0.0.3
- South Korea AI Regulatory Requirementsv0.0.5
- Texas Responsible Artificial Intelligence Governance Act (TRAIGA) Regulatory Requirementsv0.0.10
- United Kingdom Pro-Innovation AI Regulation Framework (CP 815 and CP 1019)v0.0.9
- United States Federal AI Policy (OMB M-25-21, M-25-22, and M-26-04) Regulatory Requirementsv0.0.6
Leadership, 11
Leadership pages for this area
Pages from the executive layer that tag this area. They explain and advise; the documents above govern.
- Choosing between human review, human oversight, and autonomous authority for AI-assisted workdecision narrative
- What the governing body should require before an AI system goes into productionexecutive brief
- What the governing body should require for AI data governance and classificationexecutive brief
- What the governing body should require for AI incident-response readiness before productionexecutive brief
- What the governing body should require for AI resilience and continuityexecutive brief
- What the governing body should require for third-party and AI supply-chain risk oversightexecutive brief
- What the governing body should require for workforce, conduct, and operating-model oversightexecutive brief
- From AI idea to retirement: the governed life of an AI systemjourney
- What the governing body should ask about the organization's AI inventory, risks, incidents, suppliers, and changeoversight question set
- What happens when a critical AI supplier failsscenario
- When an AI agent acts beyond its granted authorityscenario
Next on the tour
Open a domain: Privacy