CLUSTER / THE DECISION MAP
Implementation, governance, AI literacy, FRIA.
Turning the Act into working governance: inventory, literacy, impact assessment, incidents and review triggers.
IN THIS CLUSTER
12 guides.
AI governance planning checklist
A practical, non-certifying checklist for inventory, role mapping, risk review, evidence and monitoring.
Read guide ↗08 / ENABLEAI literacy in practice
Plan appropriate AI literacy for people operating or using AI systems on an organisation’s behalf.
Read guide ↗CLUSTER ARTICLEWho must comply with the EU AI Act?
Roles and territorial reach in outline: providers, deployers, importers, distributors, authorised representatives, product manufacturers and affected persons under Article 2.
Read guide ↗CLUSTER ARTICLEHow should an AI governance operating model be built?
A governance operating model for AI Act work: accountability, roles, forums, decision rights, escalation and the link to existing governance.
Read guide ↗CLUSTER ARTICLEHow should a fundamental rights impact assessment be carried out?
Article 27 FRIA step by step: who must carry it out, what it must contain, notification, updating, and the link to data protection impact assessment.
Read guide ↗CLUSTER ARTICLEHow should an AI literacy programme be designed?
Article 4 AI literacy programme design: role mapping, content, delivery, assessment and evidence, tailored to context and technical knowledge.
Read guide ↗CLUSTER ARTICLEHow should AI incidents be handled and escalated?
Incident handling for AI systems: intake, triage, serious incident reporting, corrective action, escalation and learning, across provider and deployer roles.
Read guide ↗CLUSTER ARTICLEHow should change management and reassessment work for AI systems?
Change management for AI systems: triggers, assessment, version control, reassessment of classification and requirements, and communication of changes.
Read guide ↗CLUSTER ARTICLEWhat documentation registers should an organisation keep?
Documentation registers for AI governance: inventory, decision, evidence, incident and change registers, and how they link together.
Read guide ↗CLUSTER ARTICLEHow should supplier due diligence be carried out for AI systems?
Supplier due diligence for AI: questions to ask, evidence to request, contract terms, ongoing monitoring and the limits of supplier assurances.
Read guide ↗CLUSTER ARTICLEHow should boards and management be reported to on AI?
Board and management reporting on AI Act work: what to report, how often, what decisions boards should take, and how reporting links to risk and audit.
Read guide ↗EDITORIAL ARTICLEFirst steps for an AI system inventory
How to inventory AI systems by intended purpose, actor, use context and evidence before screening EU AI Act duties.
Read guide ↗