AI Risk Board Pack Tab D of M

Overview/Register/Governance, Risk & Compliance

Governance, Risk & Compliance

Tab D of M
Reference GR
7 services

Put roles, policies, controls and regulation around AI so that it can be governed, evidenced and audited.

Tab D Services in this area

7 services held in Governance, Risk & Compliance.
Ref Service What it does
GR-01 AI Acceptable Use Policy & Policy Stack Writes or updates AI policies: acceptable use, model approval, role-based rules and an incident response addendum.
GR-02 AI Governance Framework & Operating Model Sets roles, decision rights, committees, risk processes and controls to manage AI across the company.
GR-03 AI Controls & Guardrails Framework (policy level) Defines the AI controls and maps each control to the frameworks that auditors use.
GR-04 AI Regulatory Mapping & Compliance Assessment Shows which AI laws and standards apply and what the company must do. Includes requirements across countries.
GR-05 ISO/IEC 42001 Readiness & Certification Support Prepares an AI management system for ISO/IEC 42001 certification. Does gap analysis, internal audit and control tests.
GR-06 Continuous AI Governance & Assurance (managed) Gives ongoing oversight of AI risk, compliance and control performance, not only point-in-time reviews.
GR-07 AI Ethics, Bias & Responsible AI Review Examines AI models and data for bias, fairness, transparency and accountability. Makes model cards and impact assessments.
Each service opens onto its own page. All practice areas

In detail Governance, Risk & Compliance

  • GR-01

    AI Acceptable Use Policy & Policy Stack

    Writes or updates AI policies: acceptable use, model approval, role-based rules and an incident response addendum.

    Deliverables: Signed policy set · one-page employee guide

  • GR-02

    AI Governance Framework & Operating Model

    Sets roles, decision rights, committees, risk processes and controls to manage AI across the company.

    Deliverables: Governance charter · RACI · AI committee setup · control set · operating procedures

  • GR-03

    AI Controls & Guardrails Framework (policy level)

    Defines the AI controls and maps each control to the frameworks that auditors use.

    Deliverables: Control matrix · control-to-framework map · evidence list

  • GR-04

    AI Regulatory Mapping & Compliance Assessment

    Shows which AI laws and standards apply and what the company must do. Includes requirements across countries.

    Deliverables: Obligations register · gap assessment · compliance roadmap

  • GR-05

    ISO/IEC 42001 Readiness & Certification Support

    Prepares an AI management system for ISO/IEC 42001 certification. Does gap analysis, internal audit and control tests.

    Deliverables: Gap report · AI management system documents · internal audit report · certification support

  • GR-06

    Continuous AI Governance & Assurance (managed)

    Gives ongoing oversight of AI risk, compliance and control performance, not only point-in-time reviews.

    Deliverables: Monthly or quarterly risk reports · updated risk register · regulatory updates

  • GR-07

    AI Ethics, Bias & Responsible AI Review

    Examines AI models and data for bias, fairness, transparency and accountability. Makes model cards and impact assessments.

    Deliverables: Bias test results · model cards · AI impact assessment

Prepared by
Reviewed by
Approved by
Availability — Governance, Risk & Compliance

We are not accepting new clients at present, so no briefing is running on Governance, Risk & Compliance. The services in this area are described above.

Read the availability note