AI Governance Institute
← All controls
CMP

Regulatory Compliance

Operational controls for regulatory compliance, with maturity levels, evidence requirements, and implementation guidance.

Not sure where to start? Answer 3 questions and get a tailored compliance action plan.

What applies to me? →

10 controls

CMP-001
high

Multi-Jurisdiction AI Regulatory Compliance Mapping

Map AI obligations across operating jurisdictions. Identify differing requirements, conflicts, and duties requiring simultaneous compliance.

CMP-002
medium

International AI Standards Monitoring Workflow

Track AI standards updates from ISO, NIST, OECD, ITU, and other bodies. Review internal obligations when changes are material.

CMP-003
medium

Voluntary AI Framework Obligation Mapping

Compare industry pledges, government agreements, and sandbox commitments with sector requirements. Identify resulting compliance risks and additional obligations.

CMP-004
medium

Non-Legislative AI Obligation Tracker

Track AI governance duties arising through procurement rules, bilateral agreements, sandbox exit conditions, and regulatory guidance letters.

CMP-005
medium

Regulatory Engagement Process for AI Standards Development

Define participation in regulatory consultations, comment periods, and public-private working groups developing AI rules and standards.

CMP-006
medium

AI Content Watermarking and Labeling Compliance

Keep a checklist of jurisdiction-specific AI content labeling, watermarking, and provenance requirements. Implement the necessary technical controls and procedures.

CMP-007
high

EU AI Act Conformity Assessment and FRIA Process

Implement applicable EU AI Act assessment requirements for high-risk systems. Prepare technical documentation, engage notified bodies where required, and address fundamental rights impact assessments.

CMP-008
medium

Federal AI Regulatory Monitoring and Pre-Deployment Vetting

Monitor federal executive orders, agency guidance, and frontier-model requirements. Maintain pre-deployment checks reflecting current US expectations.

CMP-009
high

AI Hardware Provenance and Export Control Compliance

Document the origin and supply chain of AI hardware, including GPUs and specialized chips. Screen infrastructure purchases against applicable export controls.

CMP-010
high

AI Use in Regulatory Reporting and Risk Modeling

Map AI uses in regulatory reporting, stress testing, and risk modeling to supervisory expectations. Document validation of outputs before regulatory submission.

Regulatory Compliance, tracked weekly

New regulatory compliance controls and the regulatory developments driving them, plus everything else changing in AI governance. Every Thursday.

Powered by Buttondown.