| Plan | Source | Manage & Maintain | Decommission | |
|---|---|---|---|---|
| Who to involve/skills required for this phase? | Procurement Specialists including Market Analysts AI experts Data Scientists Privacy and Enterprise Risk Officers Legal Professionals Executive Leadership inc Financial Policy and Research teams Potential Vendor(s) End users, where appropriate | In addition to stakeholders from previous phases Vendors (deeper engagement at this stage) Potential users Potential data subjects Other IT professionals including cybersecurity professionals, data architects and engineers Industry Standards Bodies (ISO, NIST etc) | In addition to stakeholders from previous phases Operational management and teams Quality Assurance Teams Compliance Teams | Stakeholders from previous phases |
| References | OECD AI Principles Overview OECD Trustworthy AI Tools & Metrics OECD AI RFx Procurement Framework Microsoft Responsible AI Impact Assessment Guide Google Responsible AI Practices Harvard + MIT Press paper on Data and AI Strategy Execution | World Economic Forum AI Procurement in a Box IEEE AI Procurement Standard AI Procurement Risk Management Framework Procurement of High-Risk AI Systems Navigating the AI Frontier: A Guide to Trustworthy AI Procurement | MSD Model Development Lifecycle Cornell Model Cards Hugging Face Model Cards | ISO/IEC 8183:2023 – AI data life cycle framework ISO/IEC 42001:2023 – AI management system |



