Kit de gobernanza de IA

Screen a proposed AI use case: data, affected people, AI Act prohibited/high-risk/transparency questions, tier, reviews

Staff AI policy: approved tools, permitted and prohibited uses, prompt data rules, review, IP, disclosure, incidents

AI literacy measures for staff and contractors: roles, competence levels, curriculum, records, assessment, refresh

AI policy + AI system impact assessment

GOVERN, MAP, MEASURE, MANAGE assessment: context, impacts, trustworthiness, scored risk register, controls, residual risk

Assess an AI system's benefits and harms to individuals, groups and society across its life cycle (ISO/IEC 42005:2025)

FRIA for deployers of high-risk AI under EU AI Act Article 27: processes, affected groups, risks, oversight, notification

Data protection impact assessment

Annex IV technical file for a high-risk AI system: design, data, testing, risk, standards, conformity, monitoring

Document a general-purpose AI model per EU AI Act Article 53, Annexes XI and XII, copyright policy and systemic risk

Independent model validation: soundness, data, outcomes and back-testing, benchmarking, stress tests, findings, conclusion

Post-market monitoring plan for a high-risk AI system: data collection, thresholds, reviews, Article 73 incident reporting

Report an AI incident or near miss: harm, severity, timeline, root cause, containment, notifications incl. AI Act Art. 73