Markdown Editor

Kit gouvernance de l'IA

Documents AI Act et ISO/IEC 42001/42005 : intake des cas d'usage, politique IA, littératie, analyses de risque et d'impact, FRIA, dossiers techniques, incidents.

Étape 1

Intake et politique

  1. AI Use Case Intake and Risk Tiering Template (EU AI Act)

    Standard

    Screen a proposed AI use case: data, affected people, AI Act prohibited/high-risk/transparency questions, tier, reviews

    EU AI Act (Regulation (EU) 2024/1689) Articles 5, 6, 50 and Annex III, as amended by Regulation (EU) 2026/1744
  2. AI Acceptable Use Policy Template

    Standard

    Staff AI policy: approved tools, permitted and prohibited uses, prompt data rules, review, IP, disclosure, incidents

  3. AI Literacy Plan Template (EU AI Act Article 4)

    Standard

    AI literacy measures for staff and contractors: roles, competence levels, curriculum, records, assessment, refresh

    EU AI Act (Regulation (EU) 2024/1689) Article 4, as amended by Regulation (EU) 2026/1744
  4. AI Management System Policy and Impact Assessment Template (ISO/IEC 42001)

    Standard

    AI policy + AI system impact assessment

Étape 2

Évaluations

  1. AI Risk Assessment Template (NIST AI RMF)

    Complet

    GOVERN, MAP, MEASURE, MANAGE assessment: context, impacts, trustworthiness, scored risk register, controls, residual risk

    NIST AI RMF 1.0 (NIST AI 100-1)
  2. AI System Impact Assessment Template (ISO/IEC 42005)

    Complet

    Assess an AI system's benefits and harms to individuals, groups and society across its life cycle (ISO/IEC 42005:2025)

    ISO/IEC 42005:2025
  3. EU AI Act Fundamental Rights Impact Assessment Template (Article 27)

    Complet

    FRIA for deployers of high-risk AI under EU AI Act Article 27: processes, affected groups, risks, oversight, notification

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Article 27
  4. Data Protection Impact Assessment (DPIA) Template

    Standard

    Data protection impact assessment

Étape 3

Rédaction de la documentation

  1. EU AI Act Technical Documentation Template (Annex IV)

    Complet

    Annex IV technical file for a high-risk AI system: design, data, testing, risk, standards, conformity, monitoring

    Regulation (EU) 2024/1689 (AI Act), Annex IV
  2. GPAI Model Technical Documentation Template (EU AI Act Annex XI and XII)

    Complet

    Document a general-purpose AI model per EU AI Act Article 53, Annexes XI and XII, copyright policy and systemic risk

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Article 53 and Annexes XI and XII
  3. Model Validation Report Template (SR 26-2 / SR 11-7)

    Complet

    Independent model validation: soundness, data, outcomes and back-testing, benchmarking, stress tests, findings, conclusion

    Federal Reserve SR 26-2 Supervisory Guidance on Model Risk Management (2026), superseding SR 11-7
Étape 4

Surveillance

  1. AI Post-Market Monitoring Plan Template (EU AI Act Article 72)

    Standard

    Post-market monitoring plan for a high-risk AI system: data collection, thresholds, reviews, Article 73 incident reporting

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Articles 72 and 73
  2. AI Incident Report Template

    Standard

    Report an AI incident or near miss: harm, severity, timeline, root cause, containment, notifications incl. AI Act Art. 73

    OECD AI incident concepts (2024); EU AI Act Article 73