Subscribe
Sign in
Home
Start Here
Topics
Archive
About
AI Risk Management
AI Risk Management - The First Line of Defense
Every serious conversation about AI governance eventually arrives at the three lines of defense.
Oct 3
•
Hany Tadros
The Second Line of Defense, Part 1: Building the Mandate
The second line of defense is the independent risk oversight function: the group that sets the standards the first line must meet, challenges its…
Aug 18
•
Hany Tadros
The Second Line of Defense, Part 2: Inventory and Risk Tiering
Every AI governance framework rests on a foundation that is rarely discussed with the seriousness it deserves: knowing what you actually have.
Aug 15
•
Hany Tadros
The Second Line, Part 3: Effective Challenge, Conditional Approval, and Escalation
Inventory and tiering tell the second line where to look.
Aug 13
•
Hany Tadros
The Second Line of Defense, Part 4: Measurement, Monitoring, and Control Operating Effectiveness
Most AI governance programs are strongest at design and weakest at measurement.
Aug 11
•
Hany Tadros
The Second Line of Defense, Part 5: Governed Autonomy, Building the Three Lines into the Architecture
The preceding articles describe governance as something performed around AI systems: registering them, tiering them, reviewing them, monitoring them.
Aug 9
•
Hany Tadros
The Third Line of Defense in AI Risk Management
The first line builds and owns.
Aug 8
•
Hany Tadros
Third-Party AI Risk: Governing What You Do Not Control
Most organizations do not build their own foundation models.
Aug 6
•
Hany Tadros
When Controls Fail: Risk Assessment, Issues, Remediation, Acceptance, and Appetite
What happens when a control turns out to be missing, weak, or broken, and how an organization decides in advance how much of that it is willing to live…
Aug 5
•
Hany Tadros
The Risk Taxonomy for Generative and Agentic AI Governance
Your AI Framework Is Fine.
Aug 4
•
Hany Tadros
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts
