AI Governance Institute
← All controls
CMP

Regulatory Compliance

Operational controls for regulatory compliance, with maturity levels, evidence requirements, and implementation guidance.

Get the free AI Governance Control Tracker

Get the free Excel tracker for all 132 governance controls. Score maturity, assign owners, and set deadlines, including the 10 regulatory compliance controls on this page.

  • 132 controls in Excel
  • Score maturity and assign owners
  • Track deadlines and regulation coverage

Includes AI Governance Weekly every Thursday. Unsubscribe anytime.

10 controls

CMP-001
high

Multi-Jurisdiction AI Regulatory Compliance Mapping

Map AI obligations across operating jurisdictions. Identify differing requirements, conflicts, and duties requiring simultaneous compliance.

CMP-002
medium

International AI Standards Monitoring Workflow

Track AI standards updates from ISO, NIST, OECD, ITU, and other bodies. Review internal obligations when changes are material.

CMP-003
medium

Voluntary AI Framework Obligation Mapping

Compare industry pledges, government agreements, and regulatory sandbox commitments with sector requirements. Identify resulting compliance risks and additional obligations.

CMP-004
medium

Non-Legislative AI Obligation Tracker

Track AI governance duties arising through procurement rules, bilateral agreements, regulatory sandbox exit conditions, and regulatory guidance letters.

CMP-005
medium

Regulatory Engagement Process for AI Standards Development

Define participation in regulatory consultations, comment periods, and public-private working groups developing AI rules and standards.

CMP-006
medium

AI Content Watermarking and Labeling Compliance

Keep a checklist of jurisdiction-specific AI content labeling, watermarking, and provenance (content origin) requirements. Implement the necessary technical controls and procedures.

CMP-007
high

EU AI Act Conformity Assessment and FRIA Process

Implement applicable EU AI Act assessment requirements for high-risk systems. Prepare technical documentation, engage notified bodies where required, and address fundamental rights impact assessments.

CMP-008
medium

Federal AI Regulatory Monitoring and Pre-Deployment Vetting

Monitor federal executive orders, agency guidance, and rules for the most advanced AI models. Maintain pre-deployment checks reflecting current US expectations.

CMP-009
high

AI Hardware Provenance and Export Control Compliance

Document the origin and supply chain of AI hardware, including GPUs (graphics processing units) and specialized chips. Screen infrastructure purchases against applicable export controls.

CMP-010
high

AI Use in Regulatory Reporting and Risk Modeling

Map AI uses in regulatory reporting, stress testing, and risk modeling to supervisory expectations. Document validation of outputs before regulatory submission.