GOV-01 · Brief Board AI oversight charter Board Mandate AI Literacy and Accountability
GOV-02 · Challenge Director AI literacy and continuing education Board Mandate AI Literacy and Accountability
GOV-03 · Decide Management accountability and three lines alignment Board Mandate AI Literacy and Accountability
GOV-04 · Oversee Board calendar agenda and information rights Board Mandate AI Literacy and Accountability
STR-01 · Brief Enterprise AI strategy alignment AI Strategy Portfolio Value and Investment
STR-02 · Challenge AI portfolio inventory and segmentation AI Strategy Portfolio Value and Investment
STR-03 · Decide Business case benefits and value realization AI Strategy Portfolio Value and Investment
STR-04 · Oversee Portfolio prioritization concentration and exit AI Strategy Portfolio Value and Investment
RSK-01 · Brief Board AI risk appetite statement Risk Appetite Materiality and Decision Rights
RSK-02 · Challenge Materiality and high-risk use criteria Risk Appetite Materiality and Decision Rights
RSK-03 · Decide Reserved approvals and delegation matrix Risk Appetite Materiality and Decision Rights
RSK-04 · Oversee Exception acceptance and residual risk decision Risk Appetite Materiality and Decision Rights
TRU-01 · Brief Consumer outcome fairness and harm oversight Consumer Compliance Ethics and Trust
TRU-02 · Challenge Transparency explanation notice and recourse oversight Consumer Compliance Ethics and Trust
TRU-03 · Decide Legal regulatory and market conduct compliance Consumer Compliance Ethics and Trust
TRU-04 · Oversee Privacy data rights and ethical use oversight Consumer Compliance Ethics and Trust
MON-01 · Brief Board AI dashboard and management narrative Performance Risk Monitoring and Executive Reporting
MON-02 · Challenge Threshold trend and leading indicator governance Performance Risk Monitoring and Executive Reporting
MON-03 · Decide Model generative and agentic performance oversight Performance Risk Monitoring and Executive Reporting
MON-04 · Oversee Data quality monitoring and outcome linkage Performance Risk Monitoring and Executive Reporting
RES-01 · Brief Architecture integration and technical debt oversight Technology Security Vendor and Operational Resilience
RES-02 · Challenge AI security misuse and agent authority oversight Technology Security Vendor and Operational Resilience
RES-03 · Decide Third-party concentration performance and exit oversight Technology Security Vendor and Operational Resilience
RES-04 · Oversee Business continuity recovery and manual fallback Technology Security Vendor and Operational Resilience
INC-01 · Brief Board incident materiality and notification criteria Incidents Escalation Crisis and Regulatory Communication
INC-02 · Challenge Incident briefing decision and action record Incidents Escalation Crisis and Regulatory Communication
INC-03 · Decide Crisis communication and stakeholder coordination Incidents Escalation Crisis and Regulatory Communication
INC-04 · Oversee Lessons learned control improvement and closure Incidents Escalation Crisis and Regulatory Communication
ASS-01 · Brief Independent validation and internal audit assurance Independent Assurance Reporting Quality and Renewal
ASS-02 · Challenge Board reporting quality completeness and traceability Independent Assurance Reporting Quality and Renewal
ASS-03 · Decide Regulatory examination and evidence readiness Independent Assurance Reporting Quality and Renewal
ASS-04 · Oversee Annual board effectiveness and framework renewal Independent Assurance Reporting Quality and Renewal