Evidence documentation
What does evidence documentation cover in AI governance?
5 competencies are filed under it: AI risk register and treatment tracking, Control design and operating-effectiveness testing, Evidence collection and audit-ready documentation, AI audit and independent assurance, Regulatory change management. Each has its own page saying what it means in practice.
The competencies filed under it
- AI risk register and treatment tracking
Keeps the living record: each risk with a named owner, rating, treatment, residual risk, monitoring metric, threshold and review date.
Risk and Assurance
- Control design and operating-effectiveness testing
Maps risks to preventive, detective and corrective controls, then tests design and operation with samples, evidence and defensible findings.
Risk and Assurance
- Evidence collection and audit-ready documentation
Collects, labels and preserves the evidence that a control operated, a decision was made, and a claim can be defended to an auditor or regulator.
Risk and Assurance
- AI audit and independent assurance
Scopes an AI audit, sets criteria, samples, interviews, tests, writes findings with condition, criteria, cause, effect and recommendation, and tracks remediation.
Risk and Assurance
- Regulatory change management
Spots a regulatory change, decides applicability, assigns actions, updates controls and keeps the implementation evidence.
Regulation and Policy
Roles that ask for it
- AI Controls Analyst3 of 5 competencies
- Compliance Analyst3 of 5 competencies
- GRC Associate (AI)3 of 5 competencies
- AI Auditor3 of 5 competencies
- AI Compliance Manager3 of 5 competencies
- AI Compliance Specialist3 of 5 competencies
- Security Compliance Manager3 of 5 competencies
- Senior AI Compliance Analyst3 of 5 competencies
- Chief Audit Executive, AI audit edition3 of 5 competencies
- AI Governance Analyst2 of 5 competencies
- AI Governance Coordinator2 of 5 competencies
- Cybersecurity Risk Analyst2 of 5 competencies
- Governance Analyst2 of 5 competencies
- Third-Party AI Risk Analyst2 of 5 competencies
- AI Governance Engineer2 of 5 competencies
- AI Risk Manager2 of 5 competencies
- VP of AI Governance and Ethics2 of 5 competencies
- Privacy Analyst1 of 5 competency
- AI Evaluation Specialist1 of 5 competency
- AI Governance Manager1 of 5 competency
- AI Model Validator1 of 5 competency
- AI Program Manager1 of 5 competency
- AI Incident Response Lead1 of 5 competency
- AI Regulatory Counsel1 of 5 competency
- Model Risk Manager1 of 5 competency
- Responsible AI Lead1 of 5 competency
- Chief Compliance Officer, AI compliance edition1 of 5 competency
- Chief Risk Officer, AI risk edition1 of 5 competency
Where it is taught and graded
52 graded topics, each passed by explaining it back. The first module of every program is free with a free account.
- Module 5: The EU AI Act: The Executive Map (3)
- Module 6: The World's Rulebooks (2)
- Module 7: Agents Under Command (1)
- Module 10: Evidence Engineering (5)
- Module 13: The Capstone: The Board Audit and Viva (2)
- Module 0: Taking the Controls (1)
- Module 5: Technical Controls and Threat Modeling (3)
- Module 6: Testing and Red-Teaming (2)
- Module 7: Rollout, Monitoring, and Incident Response (2)
- Module 8: Multi-Agent Governance (1)
- Module 10: The Law and the Regulators (1)
- EU AI Act Implementation Expert10 topics
- Module 1: Act Foundations and Current Timeline (1)
- Module 2: AI System Inventory and Classification (2)
- Module 3: High-Risk AI Requirements: The Technical File (5)
- Module 9: Capstone: The Compliance Portfolio (2)
- Module 8: Lineage Under Audit (4)
- Module 14: The Estate Audit (2)
- Module 5: Critical Thinking and Context Engineering (1)
- Module 6: AI in the Workplace and Team Leadership (2)
- Module 8: Assessment and Continuous Learning (1)
- Module 13: Bonus: AI for Educators (1)
- Module 7: Technology, Platforms and Vendors (1)
- Module 8: Governance and Responsible AI (1)
- Module 15: Lab: Regulated Industries (2)
- Module 16: Lab: Regional and Geopolitical AI (1)
- Module 11: Crisis Management and Controversy Navigation (1)
- Module 13: Legal Frameworks and Liability Navigation (2)
Questions
- What does evidence documentation cover in AI governance?
- 5 competencies are filed under it: AI risk register and treatment tracking, Control design and operating-effectiveness testing, Evidence collection and audit-ready documentation, AI audit and independent assurance, Regulatory change management. Each has its own page saying what it means in practice.
- Which roles ask for evidence documentation?
- 28 roles on the map name at least one of its competencies, from analyst seats to executive ones. Each role page lists the depth expected.
- Where is evidence documentation taught and graded?
- 52 graded topics teach it across 7 programs. Each topic is graded by explaining it back against its own transcript, so a pass is evidence, not attendance. The first module of every program is free with a free account.