Markdown Editor
Open the editor

AI Governance Kit

EU AI Act and ISO/IEC 42001/42005 documents: use case intake, AI policy, literacy, risk and impact assessments, FRIA, technical files and incidents.

Step 1

Intake and policy

  1. AI Use Case Intake and Risk Tiering Template (EU AI Act)

    Standard

    Screen a proposed AI use case: data, affected people, AI Act prohibited/high-risk/transparency questions, tier, reviews

    EU AI Act (Regulation (EU) 2024/1689) Articles 5, 6, 50 and Annex III, as amended by Regulation (EU) 2026/1744

  2. AI Acceptable Use Policy Template

    Standard

    Staff AI policy: approved tools, permitted and prohibited uses, prompt data rules, review, IP, disclosure, incidents

  3. AI Literacy Plan Template (EU AI Act Article 4)

    Standard

    AI literacy measures for staff and contractors: roles, competence levels, curriculum, records, assessment, refresh

    EU AI Act (Regulation (EU) 2024/1689) Article 4, as amended by Regulation (EU) 2026/1744

  4. AI Management System Policy and Impact Assessment Template (ISO/IEC 42001)

    Standard

    AI policy + AI system impact assessment

Step 2

Assessments

  1. AI Risk Assessment Template (NIST AI RMF)

    Full

    GOVERN, MAP, MEASURE, MANAGE assessment: context, impacts, trustworthiness, scored risk register, controls, residual risk

    NIST AI RMF 1.0 (NIST AI 100-1)

  2. AI System Impact Assessment Template (ISO/IEC 42005)

    Full

    Assess an AI system's benefits and harms to individuals, groups and society across its life cycle (ISO/IEC 42005:2025)

    ISO/IEC 42005:2025

  3. EU AI Act Fundamental Rights Impact Assessment Template (Article 27)

    Full

    FRIA for deployers of high-risk AI under EU AI Act Article 27: processes, affected groups, risks, oversight, notification

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Article 27

  4. Data Protection Impact Assessment (DPIA) Template

    Standard

    Data protection impact assessment

Step 3

Documentation

  1. EU AI Act Technical Documentation Template (Annex IV)

    Full

    Annex IV technical file for a high-risk AI system: design, data, testing, risk, standards, conformity, monitoring

    Regulation (EU) 2024/1689 (AI Act), Annex IV

  2. GPAI Model Technical Documentation Template (EU AI Act Annex XI and XII)

    Full

    Document a general-purpose AI model per EU AI Act Article 53, Annexes XI and XII, copyright policy and systemic risk

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Article 53 and Annexes XI and XII

  3. Model Validation Report Template (SR 26-2 / SR 11-7)

    Full

    Independent model validation: soundness, data, outcomes and back-testing, benchmarking, stress tests, findings, conclusion

    Federal Reserve SR 26-2 Supervisory Guidance on Model Risk Management (2026), superseding SR 11-7
Step 4

Monitoring

  1. AI Post-Market Monitoring Plan Template (EU AI Act Article 72)

    Standard

    Post-market monitoring plan for a high-risk AI system: data collection, thresholds, reviews, Article 73 incident reporting

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Articles 72 and 73

  2. AI Incident Report Template

    Standard

    Report an AI incident or near miss: harm, severity, timeline, root cause, containment, notifications incl. AI Act Art. 73

    OECD AI incident concepts (2024); EU AI Act Article 73