CSA (the Cloud Security Alliance) has released a new guidance document for organizational governance of artificial intelligence.
A major factor in the adoption of AI systems is their emerging capability to mimic human-level (non-deterministic) judgment. Although these advancements do present significant opportunities, they also come with a wide range of new risks and regulatory mandates. Known risks, like data privacy, are magnified and compounded in this context as well.
‘Don’t Panic! Getting Real about AI Governance’ aims to help organizations address AI risks and regulatory concerns. It recommends a risk-based approach that frames AI compliance and governance as a question of maturity; and implementing AI ethics principles and responsible AI is encouraged.
Key sections of the guidance:
- The importance of explainable AI and accountability
- Unique AI challenges
- Key factors for AI adoption
- The importance of adopting a risk-based approach to AI governance
- The need to proactively prepare for AI regulations by integrating responsible and ethical AI practices
- An overview of the NIST AI Risk Management Framework
- An overview of current AI maturity models and their gaps.






