GOVERN-4 — Govern 4: Organizational Practices and Culture
12 requirements in the Govern 4: Organizational Practices and Culture function
GOVERN 4.1Organizational policies and practices are in place to foster a critical thinking and safety-first
GV-4.1-001Establish policies and procedures that address continual improvement processes for GAI risk
GV-4.1-002Establish policies, procedures, and processes detailing risk measurement in context of use with
GV-4.1-003Establish policies, procedures, and processes for oversight functions (e.g., senior leadership
GOVERN 4.2Organizational teams document the risks and potential impacts of the AI technology they design
GV-4.2-001Establish terms of use and terms of service for GAI systems
GV-4.2-002Include relevant AI Actors in the GAI system risk identification process
GV-4.2-003Verify that downstream GAI system impacts (such as the use of third-party plugins) are included in
GOVERN 4.3Organizational practices are in place to enable AI testing, identification of incidents, and
GV-4.3-001Establish policies for measuring the effectiveness of employed content provenance methodologies
GV-4.3-002Establish organizational practices to identify the minimum set of criteria necessary for GAI
GV-4.3-003Verify information sharing and feedback mechanisms among individuals and organizations regarding