GOVERN function

GOVERN covers policies, roles, accountability, culture, and oversight for AI risk management.

Supporting records

• application and control ownership;
• member roles and assigned responsibilities;
• governance policies and thresholds;
• assigned work and decisions;
• accepted risk and remediation; and
• audit-engagement scope and history.

Review a practice

1. Name the policy and accountable owner.
2. Define the applications and decisions in scope.
3. Identify the required VeriProof records.
4. Review access, evidence gaps, and escalation paths.
5. Record management approval and review frequency outside VeriProof when required.

Set organizational policy and risk appetite through your governance process. Use VeriProof records to review how the configured controls and assigned responsibilities operate.

Related guidance

• Governance ownership
• Role permissions
• MAP function