Pillar Three

Governance

Ensuring AI systems remain accountable, transparent and subject to effective oversight.

From principles to accountability

Responsible AI governance connects ethical commitments with enforceable policies, accountable decision-makers and verifiable evidence.

Policy and Responsibility

Clear ownership, decision rights, governance bodies and escalation routes.

Risk Management

Identify, evaluate and manage AI risks throughout procurement, development and operation.

Compliance and Assurance

Document relevant requirements, test controls and maintain demonstrable evidence.

Lifecycle Oversight

Govern AI from initial design and procurement through deployment, updates and retirement.

Governance framework

  • AI inventory and system classification.
  • Roles and accountable system owners.
  • Privacy and impact assessments.
  • Transparency and disclosure policies.
  • Supplier and third-party assurance.
  • Independent reviews and audit evidence.
  • Incident reporting and corrective action.
  • Regular management and board reporting.

Rome Call alignment

Governance should translate the Rome Call principles into practical controls and measurable outcomes. Ethical alignment alone does not constitute legal compliance or formal certification.