AI Governance Controls

Human Oversight

Review gates, approval workflows, and override mechanisms for AI decisions.

7 controls

Agentic AI

Goal constraints, action boundaries, and escalation paths for autonomous AI agents.

24 controls

Security

Adversarial input defense, prompt injection protection, and model access controls.

5 controls

Audit & Logging

Immutable records of AI decisions, inputs, outputs, and model versions.

5 controls

Change Management

Model release governance, version rollback, and change approval workflows.

5 controls

Data Governance

Training data provenance, privacy controls, and data retention policies.

6 controls

Monitoring & Drift

Performance drift detection, anomaly alerting, and operational dashboards.

6 controls

Safety & Reliability

Graceful degradation, fail-safe defaults, and reliability under adversarial inputs.

6 controls

Incident Response

Containment, investigation, and remediation procedures for AI system failures.

6 controls

Procurement

Third-party AI vendor due diligence, contractual obligations, and offboarding.

15 controls

Regulatory Compliance

Multi-jurisdiction regulatory mapping, standards monitoring, and compliance architecture for AI systems.

10 controls

Board & Executive Governance

Board education, committee charters, executive reporting, risk appetite, and enterprise-wide AI governance program design.

9 controls

Model & Program Governance

Model lifecycle policy, intake and approval workflows, evaluation frameworks, and program-level AI governance maturity.

9 controls

Sector-Specific & Emerging

Healthcare, insurance, critical infrastructure, national security, and emerging-use-case controls not covered by domain-general frameworks.

9 controls