AI Governance

A crosswalk of AI incident reporting obligations: the EU AI Act, NIS2, DORA, UK, Singapore, Australia, Japan, Hong Kong and US sector rules, each with its article, clock, recipient, status and source, mapped to the NIST, NSA and CISA report stage and CSF 2.0, with a severity scale and an action tracker.

What NIST CAISSI, NSA SISC and CISA published on 16 Oct 2026: ten voluntary practices for SI control incidents in five stages, mapped to CSF 2.0 and SP 800-61 Rev. 3, who they apply to, and what a GRC team records this quarter.

Learn how to manage AI incidents when AI produces harmful, wrong, biased, unsafe, privacy-impacting, or risky output through intake, triage, evidence, remediation, and monitoring.

Learn how to find shadow AI, classify risk, route reviews, approve or suspend use, collect evidence, remediate issues, and bring unapproved AI into governance.

Learn how to connect AI governance to privacy and cyber reviews by linking AI use cases, data, systems, vendors, controls, evidence, issues, and monitoring.

Learn how to handle AI governance exceptions and conditional approvals with owners, evidence, conditions, monitoring, expiration, risk acceptance, and dashboards.

Learn how to build an AI governance dashboard that helps executives see AI inventory, risk tiers, approvals, evidence, monitoring, vendor risk, issues, and decisions.

Learn how to monitor AI systems after approval by tracking performance, drift, bias, human oversight, vendor changes, incidents, issues, evidence, and reassessment.

Learn what AI governance evidence to collect before approval and after deployment, including intake, data, vendor, risk, controls, monitoring, issues, and approvals.

Learn how to classify AI use cases by risk tier using data sensitivity, decision impact, vendor exposure, human oversight, monitoring, controls, and evidence.

Learn how to build an AI use case intake workflow that captures owners, data, vendors, risk tiers, reviews, controls, evidence, approvals, monitoring, and issues.

Learn how to govern third-party AI tools by connecting vendors, model providers, data, contracts, cyber reviews, privacy reviews, evidence, monitoring, issues, and dashboards.

Learn how AI governance works in Connected GRC by linking AI inventories, model risk, policies, controls, assessments, vendors, issues, evidence, and accountability.