AI Governance for GRC Professionals

A Practical Guide to Governing Artificial Intelligence Systems — Frameworks, Regulation, and Operational Practice

AI governance is not a separate discipline from everything a GRC practitioner already knows — it is the same risk, control, and evidence practice pointed at systems that behave differently on unseen data, produce outputs that cannot always be explained, and sit under regulation being written in real time.

Book Three picks up from ServiceNow IRM operations in Book One and boardroom judgment in Book Two, and applies both to the models an enterprise designs, trains, and deploys.

Inside the book

What makes AI risk different from traditional IT risk
The EU AI Act, US state law, and the moving regulatory landscape
NIST AI RMF and ISO/IEC 42001 in operational practice
Model inventories, impact assessments and AI review boards
Evidence, testing and monitoring for deployed models
Building an AI governance program inside an existing GRC function

Written for

GRC and compliance professionalsInternal and IT auditorsAI risk officersModel risk management teams