https://taxonomy.eticas.ai/risk/governance
Maturity: established
The risk that an AI system lacks adequate structures, policies, or accountability mechanisms to oversee its design, deployment, and use. Weak governance can lead to unclear responsibilities, poor documentation, limited auditability, and failure to align with legal, ethical, or organizational standards.
Also known as: Accountability · Governance & Accountability
System type: ADM and LLM systems
Lifecycle stages: Pre Processing, In Processing, Post Processing
Status. Each mapping shows what it rests on. Reviewed means a reviewer has confirmed the mapping against the concept’s current definition and the framework edition the taxonomy currently references; when the only confirmation is that of the person who wrote the mapping, it reads Reviewed (author’s confirmation). Outdated means it was reviewed, but the concept’s definition has changed since, so the review has to be repeated. The other statuses mean that no review has been recorded yet. Inherited mappings have been in the taxonomy since before v5.7.0 and are unchanged. They carry no record of who made them or how, and some were checked by hand when the taxonomy first published its mappings. Agent-proposed mappings come from a review carried out by AI agents, which read the framework’s text and the concept’s definition and agreed on the relation; no person has confirmed them yet. Provisional mappings were made without access to the framework’s text. Unreviewed mappings are older mappings whose target or relation was revised in v5.7.0, and any other mapping without a review. Mappings to a superseded edition of a framework are not shown: where the provision continues, they are carried to the current edition. Mappings a review has changed or rejected are not shown.
| Framework | Reference | Status |
|---|---|---|
| EU AI Act (Regulation 2024/1689) | Article 17 — Quality management system | Unreviewed |
| EU AI Act (Regulation 2024/1689) | Article 9 — Risk management system | Agent-proposed |
| ISO/IEC 42001:2023 — AI Management System | A.3 Internal organization | Unreviewed |
| ISO/IEC 42001:2023 — AI Management System | A.2 Policies related to AI | Agent-proposed |
| AIUC-1 — AI Underwriting Company Standard | Accountability domain | Inherited |
| Council of Europe Framework Convention on AI (CETS No. 225) | Article 9 — Accountability and responsibility | Unreviewed |
| NIST AI Risk Management Framework (AI 100-1) | GOVERN function | Inherited |
| NIST AI Risk Management Framework (AI 100-1) | Accountable and Transparent | Agent-proposed |
| NIST AI 600-1 — Generative AI Risk Profile | Value Chain and Component Integration | Inherited |
| OECD AI Principles | 1.5 Accountability | Inherited |
| Framework | Reference | Status |
|---|---|---|
| MIT AI Risk Repository | Governance failure | Inherited |
| W3C Data Privacy Vocabulary — AI Extension | AI Governance | Agent-proposed |