Governance

Explore how organizations oversee the AI systems they develop, buy and use. Governance assigns responsibility, assesses and manages risks, checks systems before and after deployment, and records decisions. It includes legal compliance and voluntary practices; each framework article explains its own status.

Start here

• Organizational AI governance — Roles, system inventories, risk assessment, testing, monitoring and response.

General frameworks and standards

• NIST AI Risk Management Framework — Voluntary U.S. framework organized around Govern, Map, Measure and Manage; applicable across sectors.
• NIST Generative AI Profile — Companion guidance on generative-AI risks and proposed actions.
• ISO/IEC 42001:2023 — International AI management-system standard for organizations that provide or use AI systems. The linked public IEC record explains its scope; the full standard is sold separately.

Applied guidance

• UK AI Risk Management Toolkit — UK government tools for identifying, treating, monitoring and reporting AI risks in public-sector projects and procurement.
• Brazil ethical AI research guidance (2026) — INAEP guidance for human-subject research protocols using AI and the committees that assess them.
• China AI Safety Governance Framework — Nonbinding technical framework addressing AI safety risks and governance measures in China.

Organizational incidents and accountability

• OpenAI 2026 Model Hacking Incidents — Report comparison, investigations and disclosure practices.
• Anthropic 2026 Model Hacking Incidents — Evaluation intrusions, system-card disclosures and later reassessments.
• Meta 2026 Model Hacking Incident — Muse Spark 1.1 evaluation and August retrospective.
• Moonshot AI 2026 Model Evaluation Incident — Kimi K3 benchmark-answer access and the network-access clarification.
• Alibaba-affiliated ROME Model Safety Incidents — Reported training-time network and computing misuse.

Governance and legal duties

• CSBS Artificial Intelligence Supervisory Framework — Examiner guidance on AI risks in state-supervised financial institutions; each state agency determines its use.
• Legislation and Regulation — Laws, regulations, executive actions and official guidance by jurisdiction.
• Policy — Government choices and proposals about public oversight of AI.

Explore related topics

• AI Law by Topic — Subject routes to legal instruments and policy coverage.
• AI Systems — Systems with documented legal or policy significance.
• Organizations in AI Law and Policy — Research, advocacy, institutional and company profiles.
• Insurance — AI-related coverage and insurer decision-making.