Establish accountable AI governance
Govern AI use and intake
On critical path
Approve intended and prohibited AI use
Govern AI use and intake
On critical path
Inventory AI systems and dependencies
Govern AI use and intake
On critical path
Classify AI risk and required assurance
Govern AI use and intake
On critical path
Create cross-functional applicability intake
Govern AI use and intake
Govern AI data rights and provenance
Design secure AI controls
On critical path
Assess models, services, and suppliers
Design secure AI controls
Threat-model each material AI system
Design secure AI controls
On critical path
Constrain AI identities, tools, and agency
Design secure AI controls
On critical path
Set security and privacy requirements
Design secure AI controls
On critical path
Define evaluations and release thresholds
Evaluate oversight and transparency
On critical path
Design meaningful human oversight
Evaluate oversight and transparency
Secure deployment and change control
Deploy, monitor, and assure AI
On critical path
Monitor behavior, controls, and resource use
Deploy, monitor, and assure AI
On critical path
Communicate use, limits, and recourse
Evaluate oversight and transparency
Prepare AI incident, rollback, and retirement
Deploy, monitor, and assure AI
On critical path
Run a bounded pilot and adversarial assessment
Deploy, monitor, and assure AI
On critical path
Approve operation and recurring review
Deploy, monitor, and assure AI
On critical path