Register
AI Risk Register
This register defines the schema, governance, and representative risk entries for the AI Risk Register. The AI Risk Register is the central record of identified risks associated with AI systems deployed or under development by the organization. It supports the AI Governance Council's risk oversight function and feeds into the enterprise risk management process.
- Type
- Register
- Version
- 1.0.13
- Date
- 2026-10-27
- Owner
- GRC Programme Manager
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- AI Governance
- Review frequency
- Quarterly and upon material AI system change or incident
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Register schema
- Risk categories
- Representative risk entries
- Governance and accountability
- Framework alignment
Frameworks it maps to
- ISO/IEC 42001:2023
- EU AI Act (2024)
- NIST AI RMF 1.0 (2023)
- ISO/IEC 23894:2023
- NIST IR 8312
- NIST SP 1270
- NIST IR 8596 (Cyber AI Profile), Initial Preliminary Draft (DRAFT-WATCH)
- OWASP Top 10 for Agentic Applications (2026)
- ISO/IEC TR 24027:2021
- ISO 31000:2018
Related documents
- AI Governance and Risk Frameworkai
- AI Governance Council Charterai
- AI Model Lifecycle Management Procedureai
- Risk Assessment Methodology Procedurerisk
- Corrective and Preventive Action (CAPA) Procedurecompliance
Next
All Documents