Context and scope
Normative governance framework connecting sources, applicability, risks, threats and decisions. It is distinct from the control catalogue and runtime enforcement.
Work performed
- Preserve source provenance, version and type before interpretation.
- Determine applicability by jurisdiction, sector, activity, criticality and use case.
- Assess the impact of regulatory, standards and threat changes.
- Trace source → interpretation → requirement → decision → expected control.
Documented deliverables and outcomes
Normative governance model; applicability principles; decision traceability; change management.
Scope of outcomes
The reviewed public documents describe the work and deliverables above. They do not provide a quantified before/after series supporting a risk-reduction percentage here.
Methods and tools
Governance · Compliance · Risk · AI Act · NIST AI RMF · ISO 42001
Public scope
Client data, exploitable configurations and proprietary mechanisms remain excluded from this presentation.
Last reviewed: 26 October 2026
Discuss this work