ai-risk-management

A practical implementation toolkit for ISO/IEC 42001:2023 AI Management Systems — gap assessment checklists, risk register templates, controls mapping, and implementation roadmap for GRC professionals and AI governance practitioners.

Voluntary behavioral baseline + conformance testing for transparent AI voice agents in healthcare. Open proposal with cryptographic authorization layer.

ISO 42001 implementation toolkit and EU AI Act compliance templates for UK AI companies. August 2026 deadline ready. Open-source AIMS architecture.

Practitioner-led AI security control framework: 57 controls across 12 NIST AI 600-1 GenAI risk domains, mapped to MITRE ATLAS, in three tiers. Vendor-agnostic, CC BY 4.0.

Per-action AI agent risk scoring and governance. Deterministic 5D scoring, HITL gating, FinOps, Agent Cost Management, Markov drift, audit log. Apache-2.0.

Essential resources for AI and agentic AI governance: frameworks, standards, research, tools, courses, videos, podcasts, and books.

Vendor-neutral Enterprise AI architecture for government, public-sector, and regulated organizations: context architecture, governance, security, and traceable compliance mappings.

AI governance artifact that maps, classifies and controls AI systems - aligned to the EU AI Act and NIST AI RMF

AI Management System (ISO/IEC 42001) as code — AI controls crosswalked to NIST AI RMF and ISO 23894, lifecycle-tagged, with an AI risk register and CI validation.

Lab notebooks and the SupportFlow sandbox agent for the Agentic AI Governance for GRC & Cybersecurity course. Review a real AI agent that reads customer data, calls tools, and moves money.

GenAI governance and AI agent launch-readiness framework with golden evals, risk gates, automation boundaries, human escalation, and local readiness reports.

A deterministic AI-readiness diagnostic aligned to ISO/IEC 42001 domains and NIST AI RMF functions

Uncertainty-aware AI Risk Manager for payment fraud — behavioral intelligence, decision economics, safe automation, chronological evaluation and Razorpay Test Mode.

Synthetic AI governance reference implementation with risk classification, lifecycle gates, monitoring and evidence controls.

Job-ready AI Product Manager portfolio featuring real-world case studies, PRDs, dashboards, Jira agile boards, user journeys, Excel product artifacts, and data-driven decision frameworks.

A seven-layer, fail-fast gate for deciding whether to adopt an AI model for one specific use, ending in a signed Model Trust Record. Composes NIST AI RMF, ISO/IEC 42001, CSA AICM, OWASP and MITRE ATLAS. Working draft v0.2.2.

Foundational AI governance models, schemas, registers, templates, and playbooks supporting the Global AI Governance Toolkit.

Synthetic banking AI risk management control tower demonstrating AI inventory, risk assessment, mitigation planning, controls, evidence tracking, ownership, and framework mapping.

Community resources for building, implementing, auditing, and governing AI Management Systems (AIMS) aligned with ISO/IEC 42001.

A deterministic GenAI compliance workstation & 4-tier risk classifier based on HK DPO Guideline. / 基於香港數字辦指引的生成式 AI 決定性合規審計與風險分級沙盒。