Page 400 - CyberSecurityEssentialsEnglish

Chapter Glossary
Table 8-21: Glossary of governance terms

Term Common abbreviation Plain-language explanation

Setting direction, authority, risk appetite, and
AI governance -
accountability for AI use.

Turning that direction into processes, roles, and
AI management -
resources.

Identifying what could go wrong, its likelihood and
Risk management -
impact, and the controls.

Demonstrating adherence to laws, contracts, and
Compliance -
internal policies.

Evidence giving stakeholders reasonable
Assurance -
confidence that requirements are met.

An independent assessment of the effectiveness of
Internal audit -
governance and controls.
The level and type of risk an organization is willing
Risk appetite -
to accept.

Use of AI tools the organization does not know
Shadow AI -
about or approve.
A central record of AI uses, their owners, risks, and
Use case register -
controls.
The person accountable for the value and the
Use-case owner -
outcome of a specific use.

The named person who approves and answers for
Decision owner -
a decision.

A table stating who delivers, who is accountable,
Responsibility matrix -
who is consulted, and who is informed.

Governance How principles turn into everyday decisions, gates,
-
operating model and rhythms.

Exception Documenting a departure from a rule with a
-
management reason, a duration, and compensating controls.

Grouping uses by impact and reversibility to set
Risk classification -
proportionate controls.

Meaningful human Review by someone with competence,
-
oversight information, time, and real authority to refuse.

That an affected person can know, understand,
Procedural fairness -
correct, and appeal.

399