Markdown Editor
에디터 열기

AI 거버넌스 키트

EU AI법과 ISO/IEC 42001/42005 문서: 활용 사례 접수, AI 정책, AI 리터러시, 위험·영향 평가, FRIA, 기술 문서, 사고 보고.

1단계

접수와 정책

  1. AI Use Case Intake and Risk Tiering Template (EU AI Act)

    표준

    Screen a proposed AI use case: data, affected people, AI Act prohibited/high-risk/transparency questions, tier, reviews

    EU AI Act (Regulation (EU) 2024/1689) Articles 5, 6, 50 and Annex III, as amended by Regulation (EU) 2026/1744

  2. AI Acceptable Use Policy Template

    표준

    Staff AI policy: approved tools, permitted and prohibited uses, prompt data rules, review, IP, disclosure, incidents

  3. AI Literacy Plan Template (EU AI Act Article 4)

    표준

    AI literacy measures for staff and contractors: roles, competence levels, curriculum, records, assessment, refresh

    EU AI Act (Regulation (EU) 2024/1689) Article 4, as amended by Regulation (EU) 2026/1744

  4. AI Management System Policy and Impact Assessment Template (ISO/IEC 42001)

    표준

    AI policy + AI system impact assessment

2단계

평가

  1. AI Risk Assessment Template (NIST AI RMF)

    전체

    GOVERN, MAP, MEASURE, MANAGE assessment: context, impacts, trustworthiness, scored risk register, controls, residual risk

    NIST AI RMF 1.0 (NIST AI 100-1)

  2. AI System Impact Assessment Template (ISO/IEC 42005)

    전체

    Assess an AI system's benefits and harms to individuals, groups and society across its life cycle (ISO/IEC 42005:2025)

    ISO/IEC 42005:2025

  3. EU AI Act Fundamental Rights Impact Assessment Template (Article 27)

    전체

    FRIA for deployers of high-risk AI under EU AI Act Article 27: processes, affected groups, risks, oversight, notification

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Article 27

  4. Data Protection Impact Assessment (DPIA) Template

    표준

    Data protection impact assessment

3단계

문서화

  1. EU AI Act Technical Documentation Template (Annex IV)

    전체

    Annex IV technical file for a high-risk AI system: design, data, testing, risk, standards, conformity, monitoring

    Regulation (EU) 2024/1689 (AI Act), Annex IV

  2. GPAI Model Technical Documentation Template (EU AI Act Annex XI and XII)

    전체

    Document a general-purpose AI model per EU AI Act Article 53, Annexes XI and XII, copyright policy and systemic risk

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Article 53 and Annexes XI and XII

  3. Model Validation Report Template (SR 26-2 / SR 11-7)

    전체

    Independent model validation: soundness, data, outcomes and back-testing, benchmarking, stress tests, findings, conclusion

    Federal Reserve SR 26-2 Supervisory Guidance on Model Risk Management (2026), superseding SR 11-7
4단계

모니터링

  1. AI Post-Market Monitoring Plan Template (EU AI Act Article 72)

    표준

    Post-market monitoring plan for a high-risk AI system: data collection, thresholds, reviews, Article 73 incident reporting

    Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Articles 72 and 73

  2. AI Incident Report Template

    표준

    Report an AI incident or near miss: harm, severity, timeline, root cause, containment, notifications incl. AI Act Art. 73

    OECD AI incident concepts (2024); EU AI Act Article 73