AI governance
Rules and decision criteria for AI use
How far generative AI may be used, and on whose approval. The checks and records for each use, and the criteria for approval and exceptions, organised.
Common situations
- People have started using generative AI, but what can be entered, how output is used, and who checks it are still unclear
- The PoC went well, but the roles, review points, and conditions for stopping that real operation needs are not set
- The team pushing AI and the team managing risk talk past each other — no one has separated which decisions belong to whom
What gets organised
- Where AI is used, and what information it handles
- How output is used, and where people review it
- Conditions for approval, exceptions, and stopping
- Roles across people, AI, and the teams involved
What remains
- AI Governance & Responsibility Map
- Role / Operating Design Memo
- Management / Stakeholder Brief
Used for
- Deciding whether to widen use
- Updating internal rules
- Rolling out to teams
Work done in this scene
- Financial institution — Governance for expanding generative AI use