AI Portfolio Assistant AIMS
Completeness profile referencing all AIMS documents.
Completeness profile referencing all AIMS documents.
System capabilities that create AI Portfolio Assistant attack surface.
Controls and assessment requirements for AI Portfolio Assistant governance.
Guidelines implementing principles for the assistant.
Controlled vocabulary for AI Portfolio Assistant governance.
Policy governing AI Portfolio Assistant authority, controls, and enforcement.
Governance principles for the AI Portfolio Assistant.
Risks arising from AI Portfolio Assistant authority and tool use.
Threats against the AI Portfolio Assistant authority ladder and tools.
App-layer Gemara catalogs for the AI Portfolio Assistant workload.
Risk vectors for the AI Portfolio Assistant.
Register of AI systems in AIMS scope.
Scope statement for the AI Portfolio Assistant AIMS.
Capabilities for hosting and serving the shared Governance Model.
Controls for immutable releases, runtime pinning, and publish change control.
Threats to integrity and availability of Governance Model releases.
Repository posture for hosting and serving the shared APA Governance Model.
Internal audit programme for the AIMS.
Communication requirements for the AIMS.
Competence requirements for roles governing the assistant.
Nonconformity and corrective action log.
Data resources used by the AI Portfolio Assistant.
Shared Governance Model catalogs and per-component Gemara twins for the AI Portfolio Assistant.
Responsibility allocation with suppliers.
Evaluation API and evidence behaviours for the Governance Runtime.
Controls for evaluation callers and evidence record/report/aggregate.
Threats against evaluation API and evidence behaviours.
Evaluation API and evidence record/report/aggregate for the Portfolio Assistant Governance Runtime.
AI system impact assessment for the Portfolio Assistant.
AI-related incident log.
AI management objectives and metrics.
Management review of the AIMS.
Internal and external issues framing the AIMS.
Interested and affected parties for the AI Portfolio Assistant.
External reporting obligations for AI incidents.
Dated AI risk assessment for the Portfolio Assistant.
Requirements placed on the AIMS by interested parties.
Applicability decisions for Portfolio Assistant controls.
Assurance of AI-related suppliers.
Tooling and compute resources for the assistant.