Stage 2 · Lesson 4 of 6
Ownership: every system has a named person
Every system in the inventory needs a named owner: a person, not a team or a vendor, who is accountable for its behaviour, approves changes, accepts and answers when something goes wrong. Owners are usually product or business leads, supported by a who runs the system day to day.
Record both, plus who reviewed the risk assessment and when it is due for review again. Accountability also crosses company boundaries: when you buy an AI feature, the vendor builds it but your organisation still decides how it is used, which under the often makes you the .
Common trap"owned by IT": when everyone owns a system, nobody acts on its warnings.
A question to check yourself, an AI practice session and 2 cheat sheet entries come with the full roadmap. Unlock
Resources for this stage
Start with· follow one of these
- GuideFreeNIST AI Risk Management Framework (AI RMF)
National Institute of Standards and Technology (NIST) · Intermediate
The Map function is the reasoning behind every inventory entry: context, purpose and who is affected
- GuideFreeEU AI Act: regulatory framework for AI (European Commission)
European Commission · Beginner
Provider, deployer and the risk tiers, the two labels every inventory entry needs