Start with people
Consider intended use, affected people and the decisions that should remain with an accountable person.
Approach
Our commitment to
standards-informed development.
Recognised AI governance standards inform how we design RegSpire™: from human responsibility and impact assessment to operational controls and evidence.
Our commitment
Make governance a design discipline.
Build for traceability
Connect a design requirement to its source, the control it informs and the evidence needed to evaluate it.
Review and improve
Revisit controls as use cases, standards, risks and operating conditions change.
What informs our work
Recognised foundations. Practical choices.
- AI management
- ISO/IEC 42001 informs our approach to ownership, policy lifecycle, review and continual improvement.
- System impact
- ISO/IEC 42005 informs how we consider intended use, affected parties, foreseeable impacts and reassessment.
- Risk management
- The NIST AI RMF informs how we connect governance, context, measurement and risk treatment throughout the lifecycle.
- Applicable obligations
- Regulatory, sector and customer requirements inform scoped controls through review by the appropriate subject-matter owners.
From principle to implementation
Build controls that can be examined.
- Explicit authority
- Separate policy and approval decisions from model generation. Define who may authorise an action or exception.
- Independent evaluation
- Evaluate the proposed action or output against approved rules, with clear criteria for release and escalation.
- Evidence by design
- Preserve the applicable policy version, relevant findings, human decisions and operational outcome.
- Managed change
- Review the effect of policy and system changes, then validate the affected controls before release.
An ongoing commitment
Keep the foundations current.
Standards-informed development is a continuing practice: review the sources, assess their relevance, document design choices and evaluate the resulting controls.
We use recognised frameworks alongside enterprise requirements to guide a technology-neutral governance model.
How RegSpire™ supports your compliance programmeStart a conversation