# AI governance framework builder
> Source: https://legalcode.md/skills/legalcode-ai-governance-framework-builder | [HTML version](https://legalcode.md/skills/legalcode-ai-governance-framework-builder)

Builds comprehensive organizational AI governance frameworks aligned with ISO/IEC 42001:2023 (AI Management System) and the NIST AI Risk Management Framework (AI RMF 1.0).

Builds comprehensive organizational AI governance frameworks aligned with ISO/IEC 42001:2023 (AI Management System) and the NIST AI Risk Management Framework (AI RMF 1.0). Covers governance structure (AI ethics committee, RACI matrix, reporting lines), policy development suite (acceptable use, risk classification, procurement, training data), risk management lifecycle (MAP, MEASURE, MANAGE, GOVERN functions), risk-tiered use case approval workflows, model lifecycle management (development, testing, deployment, monitoring, retirement), vendor and third-party AI assessment criteria, AI incident response procedures, and ongoing monitoring and audit programs. Use when an organization needs to establish, audit, or mature its AI governance posture; prepare for ISO 42001 certification; align with NIST AI RMF; satisfy EU AI Act deployer obligations; respond to board or investor AI governance inquiries; or produce a customizable AI governance documentation suite with an implementation roadmap. Produces governance framework documentation, policy templates, workflow designs, RACI matrices, and a phased implementation roadmap.

This skill builds a comprehensive AI governance framework tailored to the organization's industry, size, AI maturity, and regulatory environment. It operationalizes the two most widely adopted AI governance standards — ISO/IEC 42001:2023 (AI Management System) and the NIST AI Risk Management Framework AI RMF 1.0 — while also addressing sector-specific regulatory obligations (EU AI Act, HIPAA AI guidance, financial services AI governance, and others as applicable). **Covers:** - Governance structure design (AI committee, board oversight, roles and responsibilities) - Full AI governance policy suite (acceptable use, risk classification, procurement, training data, model lifecycle) - Risk-tiered AI use case classification and approval workflow - Model lifecycle management framework (development, validation, deployment, monitoring, retirement) - Third-party and vendor AI assessment process - AI incident response procedures and escalation framework - Ongoing monitoring, audit, and review program - ISO/IEC 42001:2023 alignment assessment (Clauses 4–10) - NIST AI RMF 1.0 alignment assessment (GOVERN, MAP, MEASURE, MANAGE) - Phased implementation roadmap with prioritized milestones - Governance documentation suite (template library) **Does not:** - Constitute legal advice or replace qualified AI governance counsel - Provide a substitute for formal ISO 42001 certification audit - Cover technical AI safety research (adversarial robustness, interpretability) beyond governance-relevant requirements - ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*