AI Strategy & Oversight
Defines strategic intent, executive accountability, decision rights, and governance forums for AI.
Aligned credentials
Governance Foundation
Why govern?
Regulatory & Legal
Tracks obligations and translates legal, regulatory, contractual, and policy requirements into controls.
Ethics & Responsible AI
Establishes principles, impact expectations, ethical review, and acceptable-use boundaries.
Aligned credentials
Risk Management
Identifies, assesses, treats, accepts, and reports AI risk across the organization.
Safeguard
How protect?
Security & Resilience
Protects AI assets and services against attack, misuse, failure, and operational disruption.
Aligned credentials
Data & Privacy
Governs data provenance, quality, lawful use, access, retention, privacy, and individual rights.
Aligned credentials
Supply Chain & Third-Party
Applies due diligence, contracting, evidence, monitoring, and exit controls to external AI providers.
Aligned credentials
Operate
What execute?
Use Case Portfolio
Inventories, classifies, prioritizes, approves, and retires AI use cases according to value and risk.
Lifecycle Management
Embeds governance checkpoints and evidence into design, development, validation, deployment, and retirement.
Stakeholder & Redress
Provides engagement, feedback, challenge, complaint, appeal, and remedy mechanisms for affected people.
Aligned credentials
Transparency & Explainability
Defines audience-appropriate disclosure, traceability, documentation, and explanation practices.
Assure
Is it working?
Monitoring & Drift
Tracks performance, risk indicators, control health, drift, and material changes after deployment.
Incident Response
Prepares teams to detect, contain, investigate, communicate, recover from, and learn from AI incidents.
Aligned credentials
Audit & Assurance
Provides independent evaluation of governance design, control operation, evidence, and outcomes.
