AI governance

The policies, roles, processes and controls an organisation uses to decide which AI to build or buy and keep its use lawful, safe and aligned with its goals.

Definition

AI governance answers practical questions: who approves a new AI use case, how risk is assessed, what data may be used, how systems are tested and monitored, who is accountable when something goes wrong, and how the organisation complies with laws such as the EU AI Act.

Frameworks such as NIST's AI Risk Management Framework and the ISO/IEC 42001 management system standard give structure. Effective governance is proportionate: light for low-risk internal tools, rigorous for systems that affect customers, employees or regulated decisions.

Sources

  1. NIST, AI Risk Management Framework
  2. ISO/IEC 42001:2023, AI management systems