Resources

Practical guides to better understand artificial intelligence governance, risk and compliance.

AI GOVERNANCE · AI ACT · ISO STANDARDS

AI Act, ISO and AI governance standards: how they connect and what is mandatory

How the AI Act connects with EN 18286, ISO 42001 and specialist risk, cybersecurity and governance standards.

AI CYBERSECURITY · ISO/IEC 27090

ISO/IEC 27090:2026: cybersecurity for AI systems

AI-specific threats and how to connect security with ISO 27001, ISO 42001 and AI risk management.

AI GOVERNANCE · INCIDENTS

AI incident management: how to detect, respond and document

Incident response, evidence, roles and serious incident reporting under AI Act Article 73.

AI GOVERNANCE · MONITORING

AI system monitoring: what to control after deployment

Performance, drift, risks, KPIs, KRIs and AI Act post-market monitoring after deployment.

AI ACT · TRANSPARENCY

AI Act transparency requirements: understanding Article 50

When to inform people, which content needs technical marking and how provider and deployer duties differ.

AI ACT · FUNDAMENTAL RIGHTS

Fundamental Rights Impact Assessment: understanding the AI Act FRIA

Who must assess fundamental rights impacts, what Article 27 requires, the current timetable and how to record safeguards.

AI ACT · COMPLIANCE

AI Act penalties: what happens when an organisation fails to comply?

How AI Act fines vary by infringement, company size and role, and why obligations and evidence must come first.

AI ACT · CONFORMITY

High-Risk AI Conformity Assessment: How It Works

Which conformity route applies, when a notified body is involved and what providers must demonstrate before placing a high-risk AI system on the market.

AI ACT · LOGGING & TRACEABILITY

Logs and Traceability in High-Risk AI Systems

What events to log, how long to retain records and how to use them for monitoring, oversight, audits and traceability.

AI ACT · TECHNICAL DOCUMENTATION

AI Act Technical Documentation: What a High-Risk AI System Must Contain

What information should be documented to describe, assess and demonstrate the conformity of a high-risk AI system.

AI GOVERNANCE · SHADOW AI

Shadow AI: How to Detect and Govern Unauthorised AI Use

How to identify AI tools and use cases outside formal governance and bring them into a controlled and visible process.

AI GOVERNANCE · METRICS

AI Governance KPIs and KRIs: How to Measure Whether the Framework Works

How to measure AI governance performance, risk, controls, training, vendors, evidence and maturity.

AI GOVERNANCE · LIFECYCLE

AI System Change Management: When to Reassess Risk and Classification

Which changes to models, data, purpose, suppliers or autonomy should trigger a new review of risk, classification and controls.

AI GOVERNANCE · GENERATIVE AI

Generative AI in Business: How to Govern It Without Blocking Its Use

How to enable generative AI with clear rules around tools, data, risk, vendors, human review and evidence.

AI GOVERNANCE · VENDORS

AI Vendor Management: What to Review Before You Buy

What to assess before buying third-party AI, including purpose, data, risk, security, documentation, changes, contracts and evidence.

AI ACT · HUMAN OVERSIGHT

Human Oversight in AI: How to Design It and Prove It

How to define who oversees AI, what authority they need and what evidence demonstrates effective human control.

AI ACT · AI LITERACY

AI Literacy: How to Comply with Article 4 of the AI Act

How to develop role-based AI literacy measures based on knowledge, context, risk and responsibility.

AI ACT · AI QUALITY

EN 18286: What It Is and How It Fits with the AI Act

How EN 18286 supports the AI Act quality management system requirements and how it relates to ISO/IEC 42001.

AI GOVERNANCE · INVENTORY

AI Register and Inventory: A Practical Example

A practical example showing how to record AI systems and connect purpose, owners, suppliers, risk, classification, status and review.

AI GOVERNANCE · FRAMEWORK

AI Governance Framework: How to Build One

How to connect strategy, accountability, risk, controls, evidence and monitoring within a practical AI governance model.

ISO 42001 · AUDIT

ISO 42001 Audit: What Does an Auditor Review?

What evidence, processes, risks, controls and responsibilities an auditor reviews when assessing an AI management system.

ISO 42001 · AI ACT

ISO 42001 vs AI Act: Differences and How They Work Together

How ISO/IEC 42001 differs from the EU AI Act, where they overlap and how organisations can use both within one AI governance model.

AI ACT · CLASSIFICATION

How to Classify an AI System Under the AI Act

A practical method for determining whether an AI system is prohibited, high-risk or subject to other obligations under the EU AI Act.

AI GOVERNANCE · ORGANISATION

Roles and Responsibilities in AI Governance

Who should decide, supervise, control and remain accountable for AI systems across an organisation.

AI GOVERNANCE · RISK

AI Impact Assessment: When and How to Conduct One

How to identify affected people, assess potential impacts, define controls and document decisions before deploying an AI system.

ISO/IEC 42001 · IMPLEMENTATION

How to implement ISO/IEC 42001 step by step

A practical guide from the initial assessment to an AI management system with scope, responsibilities, risk, controls, evidence and continual improvement.

EU AI ACT · HIGH RISK

Is your AI system high-risk? A straightforward way to start checking

A straightforward guide to where to begin, what to review and why the system’s real use matters more than the technology itself.

EU AI ACT · BUSINESS

EU AI Act for business: where to start without making everything complicated

Inventory, classification, owners and evidence. A practical way to begin without turning compliance into an impossible project.

ISO/IEC 42001 · GOVERNANCE

ISO/IEC 42001: what it is and how to start implementing it in an organisation

A straightforward guide to AI management systems, what they are for and how an organisation can start implementing one.

GOVERNANCE · AI INVENTORY

AI systems inventory: the starting point many businesses overlook

What an AI systems inventory is, what it should contain and why it is one of the first steps in governing AI within a business.

GOVERNANCE · EVIDENCE

AI evidence: how to show that your organisation is doing things properly

What evidence means in AI governance, what to retain and how to show that controls, reviews and decisions actually happened.

GOVERNANCE · RISK

AI risk management: how to identify, assess and treat the risks in your systems

A practical guide to identifying, assessing, prioritising and treating the risks associated with artificial intelligence systems.

EU AI ACT · BUSINESS

EU AI Act obligations for businesses using AI

What an organisation using AI should review: roles, inventory, training, transparency, risk, suppliers, evidence and oversight.

AI GOVERNANCE · POLICIES

AI Use Policy for Companies: What It Should Include

A practical guide to setting clear rules for how employees and teams can use AI safely and consistently within an organisation.

GOVERNANCE · STRATEGY

AI governance: how to organise responsibilities, controls and decisions around artificial intelligence

How to define roles, policies, human oversight and controls for consistent decisions about artificial intelligence.