Framework
AI Governance and Risk Framework
This framework defines a reusable governance model for artificial intelligence systems. It addresses accountability, lifecycle control, risk classification, data governance, security, human oversight, supplier dependency, monitoring, assurance, and retirement.
- Type
- Framework
- Version
- 1.1.9
- Date
- 2026-10-27
- Owner
- AI Governance Approver
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- AI Governance
- Review frequency
- 6 to 12 months and upon material AI risk or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Governance objectives
- AI lifecycle model
- Risk classification criteria
- Control domains
- Shadow AI control boundary
- Assurance requirements
- Framework alignment
- Limitations
Frameworks it maps to
- ISO/IEC 42001:2023
- ISO/IEC 23894:2023
- ISO/IEC 5338:2023
- ISO/IEC 8183:2023
- NIST AI RMF 1.0 (2023)
- EU AI Act (2024)
Related documents
- AI Security and Risk Standardai
- AI and Agentic Development Security Standardai
- AI System Impact Assessment Procedureai
- AI System Register Templateai
- Privacy and Data Governance Policyprivacy
- Supplier and Cloud Governance Frameworksupply-chain
- Cross-Framework Alignment Matrixgovernance
- AI Governance Council Charterai
- AI Risk Registerai
- Ethical AI Use Guidelineai
- AI Audit Procedureai
Next
All Documents