Centralized organizational registry tracking model types, risk tiers, third-party components, hosting models, data classifications, TEVV verification, and review cadences.
Showing 6 systems
| System ID | System Name & Dept | Purpose & AI Tasks | Risk Tier | Lifecycle Status | TEVV Status | Next Review | Actions |
|---|
Operational governance RACI matrix, role hierarchy, veto authorities, human-AI oversight configuration register, and mandatory personnel training tracker.
Showing 28 lifecycle activities
Mandatory oversight definitions, human roles in output, and override authorities per registered system.
| System ID | System Name | Configuration Level | Human Role in Output | Override Authority | Mandatory Review Triggers |
|---|
Tracks personnel training across NIST AI RMF core risk domains.
| Staff Member | Governance Role | AI Ethics | NIST RMF | Bias/Fairness | AI Security | Incident Resp. | Policy |
|---|
Operationalizing organizational AI principles, mandatory 4-tier deployment gates, lifecycle documentation standards, third-party foundation model vetting, and formal exception tracking.
Standard conditions requiring immediate system suspension, fallback to human operators, or complete retirement.
| ID | Decommissioning Trigger | Operational Threshold / Trigger Condition | Mandatory Response Action |
|---|
8 foundational organizational principles with active operational standards and verification criteria.
| ID | Principle & Ref | Policy Statement | Operational Standard & Verification | Status |
|---|
Readiness and compliance status of the 9 required audit artifacts across the AI system lifecycle.
| Doc ID | Mandatory Artifact Name | Lifecycle Stage | Accountable Role | Artifact Purpose & Retention | Readiness Status |
|---|
Mandatory vetting criteria for foundation models, commercial APIs, and external ML vendor integrations.
| Item | Vetting Dimension | Weight | Mandatory Contractual & Technical Requirement | NIST AI RMF Ref |
|---|
Time-bound approved exceptions with mandatory compensating controls and executive sign-off.
| Waiver ID | System Name | Clause Affected | Nature of Exception & Compensating Controls | Expiry Date | Approved By |
|---|
Operationalizing the MAP Function across system boundaries, 13 profiled harm scenarios (R-01..R-13), risk-benefit utility balances, and vulnerable group safeguards.
Balancing operational utility and financial inclusion against pre- and post-mitigation risk scores.
| ID | Category | Risk & MAP Subcategory | Pre-Risk | Control Description & Treatment | Residual Risk | Monitoring & Frequency |
|---|
Specific risks, required safeguards, and verified protective measures for vulnerable customer cohorts.
| Vulnerable Cohort | Vulnerability Basis | Specific Risks from AI | Mandatory Protective Safeguards | Status |
|---|
20 key internal and external actors categorized by Power-Interest quadrant and engagement feedback mechanisms.
| ID | Stakeholder Name | Category | Priority | Power-Interest | Engagement Channel & Feedback Loop |
|---|
Defense-in-depth human-AI operational interaction boundaries and auto-escalation pathways.
| Oversight Layer | Operational Description & Escalation Trigger | Execution Cadence |
|---|
Supply chain risk assessment covering inference APIs, vector search, pre-trained weights, and edge transit.
| ID | Component & Provider | Component Type | Risk Level | Data Residency | Data Retention SLA | Status |
|---|