Standards & Regulations
Standards & Regulations
The regulatory and standards context that underpins credible AI governance.
A credible AI Council needs a standards spine. This section covers the key frameworks and regulations that inform the toolkit's design and that your council should be aware of.
In This Section
- NIST AI RMF. The US AI Risk Management Framework and its Playbook
- ISO/IEC 42001. The first AI management system standard
- EU AI Act. The EU's comprehensive AI regulation and its timeline
- Other Frameworks. OECD, UNESCO, Council of Europe, and sector-specific frameworks
How These Relate to the Toolkit
| Framework | Role in the Toolkit |
|---|---|
| NIST AI RMF | Lifecycle structure (Govern, Map, Measure, Manage), shapes the overall governance flow |
| ISO/IEC 42001 | Management system model, shapes the continuous improvement and records approach |
| EU AI Act | Regulatory compliance driver, shapes risk tiering, documentation, and literacy requirements |
| OECD AI Principles | Normative foundation, shapes council principles and external commitments |
| UNESCO AI Ethics | Human rights foundation, shapes fairness, transparency, and stakeholder analysis |