Resources
AI governance, made practical.
Guides and checklists for inventorying AI, assessing risk, and meeting the frameworks that matter.
How to build an AI use register (and why you need one)
A practical guide to inventorying AI across your organization: what an AI use register is, what to capture, how to start, and the mistakes to avoid.
6 min readNIST AI RMFNIST AI RMF: a practical getting-started checklist
Turn the NIST AI Risk Management Framework's four functions — Govern, Map, Measure, Manage — into concrete actions you can start this quarter.
7 min readStandardsISO/IEC 42001 vs the EU AI Act: what's the difference?
A management-system standard and a law are not the same thing. Here's how ISO/IEC 42001 and the EU AI Act differ, how they complement each other, and what to do.
6 min readShadow AIWhat is shadow AI — and how do you bring it under control?
Shadow AI is the unsanctioned use of AI tools across your organization. Here's why it happens, the risks it creates, and a practical way to surface and govern it.
5 min readRisk assessmentAI risk assessment template
Free AI risk assessment template (PDF). The factors that drive risk, a simple tiering model, and a printable worksheet for every AI use case.
6 min readHuman oversightMeaningful human oversight for AI decisions
"Human in the loop" is easy to say and hard to do well. Here's what meaningful human oversight actually requires — and how to implement it by risk level.
6 min readFor consultants & MSPsAI governance as a service: a guide for consultants and MSPs
AI governance is a fast-growing advisory line. Here's how consultants and MSPs can deliver it as a repeatable, productized service across many clients.
6 min readIncident responseAI incident response: what to do when AI goes wrong
AI systems fail in new ways — bad outputs, bias, privacy exposure. Here's how to detect, triage, contain, and learn from AI incidents.
6 min readPoliciesAI policy essentials: the policies your organization needs
You don't need a binder of policies to govern AI — you need a few clear ones. Here are the essential AI policies and what each should cover.
6 min readHealthcareAI governance for healthcare
AI in healthcare touches patient safety and protected health information. Here's what makes healthcare AI governance different and how to approach it.
6 min readFinancial servicesAI model governance for financial services
AI model governance in finance: model risk, fair lending, and consumer-protection rules — building on frameworks banks already know.
6 min readInsuranceAI governance for insurance companies
Who offers AI governance solutions for insurance companies, which platforms help, and how to govern underwriting, pricing, and claims AI.
6 min readHR & hiringAI governance for HR and hiring
AI in hiring is squarely in the regulatory spotlight — from the EU AI Act to NYC Local Law 144. Here's how to govern recruiting and HR AI.
5 min readGovernment contractorsAI governance for government contractors
Federal and public-sector contracts increasingly require responsible-AI practices aligned to NIST. Here's how contractors can get ahead of it.
5 min readEU AI ActEU AI Act readiness assessment: a practical checklist
EU AI Act readiness assessment and checklist: determine your role, classify systems, and build the evidence a readiness review needs. Not legal advice.
7 min readLooking for a definition? Browse the AI governance glossary →