Artificial Intelligence
NIST AI Risk Management Framework Explained
The NIST AI Risk Management Framework is the reference most likely to come up when a board, a customer or an auditor asks how an organization manages AI risk. It is worth understanding what it is, and equally what it is ...
NIST AI RMF vs ISO/IEC 42001
These two are frequently presented as alternatives, as though an organization picks one. They are different kinds of instrument, they answer different questions, and an organization can reasonably use both.
Status note. ...
AI Data Governance and Privacy
AI data governance is the part of a governance program that answers what information may reach an AI system, where it goes afterwards, how long it stays, and who may see what comes out.
It is the domain most often assume...
Generative AI Governance
Generative AI does not need a separate governance program. It needs the same program with several things added, because a handful of its risks either do not arise with other kinds of AI or arrive with a different shape.
...
AI Acceptable Use Policy
An AI acceptable use policy states what staff may do with AI at work, what they may not, and where to ask. It is the one governance document most people in an organization will ever read, which makes its length and its t...
AI Governance for K-12 Schools
School districts arrive at AI governance from a different direction from businesses. Staff adoption is already widespread, the data involved is about children, the community has a direct interest, and the organization fr...
What You Own at the End of an AI Governance Engagement
This page is about the artifact rather than the work. If you want the order the work happens in, that is how to create an AI governance program, and this page deliberately does not repeat it.
What follows is what changes...
Measuring the Value of AI Governance
Governance is easy to buy and hard to justify a year later, because the thing it prevents does not happen and the thing it produces is paperwork. This page is about what to measure so that the question can be answered wi...
AI Governance for Small and Midsize Businesses
Most AI governance material is written for organizations with a risk function, a legal team, and someone whose job title contains the word “compliance”. A fifty-person company has none of those, and copying t...
How to Build an AI Strategy for Your Business
Most documents called an AI strategy are not one. They are a list of interesting technologies with an ambition attached, “we will use AI to improve customer experience and drive efficiency”, which commits the...