#AI governance
2 articles
AI governance framework: roles, an AI system register and the approval process
An auditor asks for a list of the AI systems used in the company and the name of the person who approved each one. If the answer takes a week of emails, the company has a policy but no AI governance. We show how to build a model that answers the question straight away.
AI security best practices: an enterprise risk and control map for CISOs
The language model is rarely the weakest link. More often it is an API key in a repository, an assistant that can read all of SharePoint, or a vendor whose contract nobody read. Here is how to cover AI security with the cybersecurity controls you already have — domain by domain.