CONTROLLED GOVERNANCE DOCUMENT

AI Governance Committee

Committee Charter

Insurer
[Insurer]

Sponsor
[Executive sponsor]

Chair
[Committee chair]

1. Purpose and mandate

The AI Governance Committee oversees the responsible development, acquisition, deployment, use, monitoring, material change, and retirement of AI systems used by or on behalf of [Insurer]. The Committee connects enterprise strategy, insurance obligations, consumer protection, risk management, technology, data, and business accountability.

2. Authority and reporting

The Committee may require information and review; approve, condition, restrict, pause, or escalate AI uses within delegated authority; and track remediation. It reports to [Board or board committee]. Material consumer harm, legal or regulatory concerns, risk-limit breaches, and unresolved high-severity issues are escalated without waiting for the regular cycle.

3. Scope

Internal, acquired, embedded, and vendor-operated AI systems.
Predictive, generative, retrieval, assistant, and agentic capabilities.
Insurance and material enterprise uses across the complete lifecycle.
Third-party models, data, platforms, tools, agents, and downstream providers.

4. Core responsibilities

AI strategy and risk appetite
Policy and lifecycle standards
Inventory and risk tiering
Use-case approval and conditions
Independent challenge and validation
Production monitoring and incidents
Third-party AI oversight
Executive and board reporting

5. Membership

Voting membership includes accountable business leaders and qualified representatives from risk, model risk, legal, compliance, privacy, security, data, technology, and other disciplines appropriate to the portfolio. Internal audit normally participates as an independent observer or assurance function.

6. Meetings and decisions

The Committee meets quarterly. Quorum is two-thirds of voting members. Decisions use consensus preferred; majority vote if needed. Conflicts, recusals, evidence, rationale, conditions, dissent, owners, due dates, and escalation are recorded.

7. Records and review

The secretary maintains agendas, attendance, papers, minutes, decisions, actions, exceptions, evidence, and reporting under applicable retention, confidentiality, privacy, security, privilege, and regulatory requirements. The charter is reviewed at least annually and after material governance change.