AI Risk and Compliance Management involves a strategic framework designed to identify, assess, and mitigate the inherent risks associated with the development and deployment of AI technologies. As organizations increasingly rely on AI systems, it becomes essential to navigate the complexities of compliance with global regulations such as the GDPR and the EU’s AI Act. This framework includes a comprehensive risk assessment process to evaluate potential challenges such as, algorithmic bias, data privacy, and transparency. It ensures that AI systems are developed and used in an ethical and responsible manner. Engaging diverse stakeholders, including ethicists and legal experts, enhances the organization's ability to address the social and ethical implications of AI technologies while fostering a culture of accountability.
- AI System Intake Form to request AI use case, AI model, and Datasets.
- AI Risk and Compliance workspace to manage and monitor the risk and compliance posture of AI systems.
- Perform impact assessments (using Smart Assessments) to identify how AI systems, models, and datasets affect fundamental rights.
- New Roles & Access Controls to handle AI Risk and Compliance Management.
- Identify the AI systems from the CMDB by enhancing or leveraging the Entity filter capability.
- Advance Risk Assessment (ARA) integration to identify individual and specific risks associated with AI assets, such as AI systems, models, and datasets. Perform risk assessments on each identified risk separately.
- Bulk risk assessment feature enables product owners to assess the regulatory and operational risks of multiple AI use cases in a unified workflow.
- Auto-creation or resolving entity
- Based on the existence of the CMDB AI System record, an Entity can be auto-created or resolved to an existing record.
- 360-Relationship View:
- Explore the relationships between critical AI assets that impact your business, including controls, risks, and issues.
- Entity based access control
- Implemented Entity based access control feature which facilitates object access via entities. You can map entities to specific users or user groups, enabling you with a granular level of access control.
- Bulk AI Risk Assessments, secure AI Risks and Controls using Entity-based Access Control, Unified Content Management, Email-driven AI Misuse or Inquiry reporting.
- New
- New Automated risk classification feature for assets.
- Support for managed and unmanaged assets feature.
- Handled control objective workflow changes.
- Entity class restriction feature to support only AI asset types.
- Changed
- Adopted smart assessment template category changes.
- Fixed
- Fixed security and localisation issues.
Permissions and roles:
- Role required to install the app: System Admin (admin)