AI Governance Pathways

Download Tools

From pathway to practice: Key Practices → Practical Tips → Tools

AI Ready Pathway

Ship wheel with graphical waves over it.

Establish AI Governance Ownership & Responsibilities

  1. IAPP – Establishing Governance for AI Systems
  2. Madison AI – Miro Template: Choose AI Governance Structures
  3. Prism – Decentralised AI Governance
  4. AWS – Centralise or Decentralize?
  5. InfosecTrain – Centralised vs Federated vs Decentralised AI Governance
Compass arrow pointing north.

Define Responsible AI Principles

  1. OECD – AI Principles
  2. AI Forum NZ’s Trustworthy AI in Aotearoa AI ethical principles
  3. NZ Public Service – AI Principles
  4. Australia – AI Ethics Principles
  5. Microsoft – Responsible AI Principles or Google – AI Principles
Magnifying glass and shield with checkmark on top of documents.

Develop an AI Policy

  1. Responsible AI Institute – AI Policy Template
  2. AI Institute. (2024, January). AI Policy Template. AI Institute.
  3. Mott MacDonald – Responsible AI Policy
  4. Doing AI Governance – Creating Your AI Governance Policy
  5. European Institute for Sustainable IT (ISIT) Sustainable AI Charter
Gauge pointing to the middle segment, with text "Risk" below it.

Align with Organisational Risk Appetite

  1. NIST AI Risk Management Framework (AI RMF 1.0)
  2. AI Procurement Lab – Risk Management Framework for AI Procurement
  3. ISACA – Applying Risk Appetite and Tolerance to AI
  4. TechTarget – How to Write a Risk Appetite Statement
Magnifying lens.

Implement AI Risk Assessments

  1. Stats NZ – Algorithmic Impact Assessment Toolkit
  2. Government of Canada – Algorithmic Impact Assessment Tool 
  3. Ethos – AI Impact Checklist
  4. Ada Lovelace Institute – AI Impact Assessment Template
  5. Microsoft – Responsible AI Impact Assessment Template
Desktop computer showing a window with box icons, and a magnifying lens inspecting a package box.

Develop an AI System Inventory

  1. Institute of Community Directors – AI Governance Framework Template
  2. New York State ITS – AI System Inventory Guidance
  3. Ethos – Building Your AI System Inventory
  4. ZealStrat – AI System Inventories: The Foundation for Governance
Lightbulb turned into puzzle pieces, with one piece highlighted at the top right.

Build Capability

  1. AI Singapore – AI Literacy for Working Professionals
  2. IAPP – AI Governance Center
  3. IBM – AI Literacy Resources 
  4. MacCallum, Parsons & Mohaghegh – Scaffolded AI Literacy (SAIL) Framework
  5. World Economic Forum – Empowering AI Leadership
  6. Environmental Variables Podcast
Person checking a list, with icons of a file and an eye in the background.

Define Human Oversight Points

  1. Digital.govt.nz – Responsible AI Guidance for the Public Service (GenAI)
  2. CSET – AI Safety and Automation Bias 
  3. SGS – Trustworthy AI: Human Agency and Oversight 
  4. World Employment Confederation – Guide on Transparency and Human Oversight
  5. Dialzara – Human Oversight in AI: Best Practices

AI Smart Pathway

Multiple points in a path that point from one step to the next.

Implement Risk-Based AI Governance Processes

  1. Advai Case Study: Implementing a Risk-Driven AI Regulatory Compliance Framework 
  2. CSET – A Matrix for Selecting Responsible AI Frameworks
  3. Ethos AI – Choosing the right controls for AI Risk 
  4. ISO/IEC 23894:2023 – Guidance on AI Risk Management
  5. Business.govt.nz – Risk Management Plan Worksheet
A cog icon surrounded by 3 checkbox icons in a circle, with arrows between them to signify a cycle.

Formalise AI Lifecycle Controls, Roles & Approval Gates

  1. OECD – Advancing Accountability in AI
  2. University of Turku – AI Governance Framework
  3. PMI – Cognitive Project Management for AI (CPMAI) 
  4. The Software Alliance – Confronting Bias: BSA’s Framework to Build Trust in AI
A handshake enclosed in a circle.

Embed AI Governance in Procurement and Vendor Management

  1. AI Procurement Lab – Risk Management Framework for procuring AI solutions
  2. Center for Inclusive Change – AI Procurement: Essential Considerations in Contracting
  3. Australian Government – Artificial Intelligence (AI) model clauses
  4. FS-ISAC – Generative AI Vendor Risk Assessment Guide
  5. Future of Privacy Forum – Privacy Tech Buyer Framework 
  6. VerityAI Blog post – Sustainable AI Procurement: Vendor Selection for Environmental Compliance
Stylized icon of a document inside an application window.

Introduce Standardised Model and Decision Documentation

  1. ICO & Turing Institute – Explaining decisions made with AI
  2. NZ Ministry of Social Development – Data Science Guide for Operations
  3. MAS – AI Model Risk Management Guide
  4. Google – Model Cards for Model Reporting 
  5. Microsoft – Data Sheets for Datasets
Megaphone with tick marks signifying sound emanating from it.

Develop Transparency and Communication Practices

  1. Australian Government – Standard for AI Transparency Statements
  2. UK Government – Algorithmic Transparency Recording Standard Hub
  3. Microsoft  – Responsible AI Transparency Report 2025 
  4. N. Balasubramaniam et al – Transparency and explainability of AI systems: From ethical guidelines to requirements 
  5. OECD – AI Transparency Reports
Application window with a gear inside it and an alert triangle icon overlayed on it.

Monitor AI Systems Performance

  1. ISO/IEC 42001:2023 – Requirement 9 “Performance Evaluation”
  2. Chip Huyen – Data Distribution Shifts and Monitoring
  3. Evidently AI  – Model Monitoring for ML in Production
  4. WhyLabs – Best Practices for Monitoring Large Language Models
  5. FinOps Foundation – FinOps for AI Overview
  6. GovLoop – Budgeting for Inference Sprawl: FinOps + GreenOps for AI

AI Trusted Pathway

Several hands reaching in, in circular formation.

Drive a Culture of Responsible Innovation

  1. Human Technology Institute – People, Skills, and Culture in AI Governance 
  2. MIT Sloan – How Organisations Build a Culture of AI Ethics
  3. ThoughtWorks – Responsible Tech Playbook
  4. Google – re:Work
  5. UKRI  –  Responsible Innovation
Globe with a prize ribbon on top of it.

Engage with External Standards and Benchmarking

  1. OECD – AI Policy Observatory & Global Index on AI 
  2. NIST –  AI Risk Management Framework (AI RMF) + Playbook
  3. ISO/IEC 42001:2023 Information technology — AI — Management system 
  4. Microsoft – Responsible AI Maturity Model 
  5. GSMA Responsible AI Maturity Roadmap & Step-by-Step-Guide
  6. Sustainable IT – IT Standards for Environmental, Social, and Governance Sustainability
Arrows rotating in a circle and two hands in thumbs up & thumbs down form.

Measure Impact and Continuously Improve

  1. OECD – AI Metrics Catalogue
  2. Leaders in AI Summit – What Are the Key Metrics for Measuring AI Governance?
  3. Towards a Responsible AI Metrics Catalogue: A Collection of Metrics for AI Accountability
  4. Google Cloud – KPIs for gen AI: Measuring AI Success
  5. CNIL – AI Self-Assessment Guide
Circular badge with a check mark on a shield and the word trusted on top of it.

Prepare for Assurance and Accountability Demands

  1. UK Government – Roadmap to an Effective AI Assurance Ecosystem and  Portfolio of AI Assurance Techniques
  2. IIA – Artificial Intelligence Auditing Framework
  3. ForHumanity – Audit Frameworks 
  4. Ada Lovelace – AI Assurance? 
  5. IPIE – Global Approaches to Auditing Artificial Intelligence
Hand raised and to its right a speech bubble with text and question inside it.

Strengthen Human Oversight and Enable Contestability

  1. Sterz et al. – On the Quest for Effectiveness in Human Oversight: Interdisciplinary Perspectives 
  2. Moreira et al. – Explainable AI Systems Must Be Contestable: Here’s How to Make It Happen
  3. BCG – You Won’t Get GenAI Right If You Get Human Oversight Wrong
  4. Landau et al. – Recommendations for Government Development and Use of Advanced Automated Systems to Make Decisions about Individuals
  5. ForHumanity – Combatting Automation Bias
The letters "AI" inside a box and a stylized star on the top right.

Anticipate and Govern Emerging AI Use Cases

  1. IAPS – AI Agent Governance: A Field Guide 
  2. UK Government – AI Insights: Agentic Workflow
  3. OECD – Steering AI’s Future: Strategies for Anticipatory Governance 
  4. AI Governance Initiative – Risk Tiers: Towards a Gold Standard for Advanced AI 
  5. Cooperative AI Foundation. – Multi-Agent Risks from Advanced AI

printer icon