ai-risk-management

A practical implementation toolkit for ISO/IEC 42001:2023 AI Management Systems — gap assessment checklists, risk register templates, controls mapping, and implementation roadmap for GRC professionals and AI governance practitioners.

Voluntary behavioral baseline + conformance testing for transparent AI voice agents in healthcare. Open proposal with cryptographic authorization layer.

ISO 42001 implementation toolkit and EU AI Act compliance templates for UK AI companies. August 2026 deadline ready. Open-source AIMS architecture.

A free visual learning library for ISO/IEC 42001:2023 - the international standard for ISO/IEC 42001:2023 Artificial intelligence (AI) Management Systems. Reference cards, memory cards and deep dives.

Practitioner-led AI security control framework: 57 controls across 12 NIST AI 600-1 GenAI risk domains, mapped to MITRE ATLAS, in three tiers. Vendor-agnostic, CC BY 4.0.

Agent Attribution Practice (AAP) — architecture decision records on accountability distribution in autonomous AI agents. 10 ADRs + 4 Business AI Quadrants + Phase Separation axis. Harness-neutral practice library extracted from contemplative-agent.

Interactive crosswalk mapping EU AI Act obligations to NIST AI RMF and ISO 42001 controls, with mapping strength indicators, gap analysis, and source links. 30 controls mapped. Free and open source.

Per-action AI agent risk scoring and governance. Deterministic 5D scoring, HITL gating, FinOps, Agent Cost Management, Markov drift, audit log. Apache-2.0.

AI Governance portfolio case study assessing a high-risk automated loan underwriting system using VerifyWise, EU AI Act, NIST AI RMF, and ISO/IEC 42001 concepts.

Curated frameworks, standards, regulations, and tools for enterprise AI governance, risk, security, and compliance (GRC).

Customizable AI Acceptable Use Policy and governance framework for US enterprises. MIT licensed. Covers compliance, HR, infosec, and legal.

Evidence-aware risk review guardrails for Laravel applications, AI products, RAG systems, and MCP tools.

AI Governance portfolio case study assessing a high-risk automated loan underwriting system using VerifyWise, EU AI Act, NIST AI RMF, and ISO/IEC 42001 concepts.

Essential resources for AI and agentic AI governance: frameworks, standards, research, tools, courses, videos, podcasts, and books.

Vendor-neutral Enterprise AI architecture for government, public-sector, and regulated organizations: context architecture, governance, security, and traceable compliance mappings.

Technical blueprint for EU AI Act controls: 79 controls mapped to NIST AI RMF and ISO/IEC 42001, 73 of them to a specific AI Act article, and where relevant to OWASP LLM, MITRE ATLAS, GDPR and DORA. Threat model for a high-risk CV-screening use case. Not legal advice.

AI governance artifact that maps, classifies and controls AI systems - aligned to the EU AI Act and NIST AI RMF

AI Governance Platform (AIGP) for enterprise AI risk management — deterministic, pre-execution runtime enforcement producing signed, independently verifiable evidence for every AI decision. Guardrails, agentic AI security, model risk, EU AI Act / NIST AI RMF / ISO 42001.

Free, open AI governance templates from CarbeneAI — a maturity self-assessment and a full framework template. Grounded in NIST AI RMF 1.0 and ISO/IEC 42001. CC BY 4.0.

A curated list of regulations, standards, risk frameworks, security resources, and open-source tools for governing AI systems — with a focus on agentic AI in regulated environments.