Page 368 - CyberSecurityEssentialsEnglish
P. 368
requires the organization to hold a systematic way of managing the opportunities and risks
of developing, providing, or using AI [3].
Complementary guidance on AI risk management offers practical direction and can be used
as a supporting layer when turning governance principles into a risk register, controls, and
periodic reviews [14].
FIGURE 8-4: THE CYCLE OF GOVERNING, MAPPING, MEASURING, AND MANAGING
What to notice: Four interconnected functions revolving around continuous improvement
rather than a single approval.
Source: Prepared by the author, drawing on an established AI risk management framework
[2].
367
