AI Governance
LABUSA insights on AI governance: responsible, secure, and compliant approaches to deploying artificial intelligence across your organization.
What Is AI Governance?
AI governance is the system an organization uses to decide what artificial intelligence it will adopt, who owns each system, what data may go into it, who reviews what comes out, and what happens when something goes wron...
AI Governance Framework for Organizations
A governance framework is a list of the things a program has to cover, so that gaps are visible rather than discovered. This one has fourteen domains. Few organizations start with all of them, and the order they are buil...
How to Create an AI Governance Program
This is the order to build an AI governance program in, and the reasoning for the order. What the program has to contain is a different question, answered by the AI governance framework. This page assumes you have read t...
AI Inventory and Use-Case Management
An AI inventory is a current record of the AI systems an organization uses, who owns each one, and what data goes into it. It is the first thing a governance program builds and the thing every other control depends on.
T...
AI Risk Assessment
An AI risk assessment answers a narrow question: for this use of this system, what could go wrong, how badly, who would be affected, and what are we going to do about it.
This page is about the method. What the risks act...
AI Vendor Risk Assessment
Most AI in most organizations was never bought as AI. It arrived inside a product purchased for another reason, under terms agreed before the feature existed, and was switched on by an update.
That is the central fact of...
AI Governance Checklist
A checklist for working out where an AI governance program actually stands. Every item is a statement that is either true today or is not, which makes it usable in a meeting in a way a maturity score is not.
It is derive...
NIST AI Risk Management Framework Explained
The NIST AI Risk Management Framework is the reference most likely to come up when a board, a customer or an auditor asks how an organization manages AI risk. It is worth understanding what it is, and equally what it is ...
NIST AI RMF vs ISO/IEC 42001
These two are frequently presented as alternatives, as though an organization picks one. They are different kinds of instrument, they answer different questions, and an organization can reasonably use both.
Status note. ...
AI Data Governance and Privacy
AI data governance is the part of a governance program that answers what information may reach an AI system, where it goes afterwards, how long it stays, and who may see what comes out.
It is the domain most often assume...