Evidence documentation
What does evidence documentation cover in AI governance?
5 competencies are filed under it: AI risk register and treatment tracking, Control design and operating-effectiveness testing, Evidence collection and audit-ready documentation, AI audit and independent assurance, Regulatory change management. Each has its own page saying what it means in practice.
The competencies filed under it
- AI risk register and treatment tracking
Keeps the living record: each risk with a named owner, rating, treatment, residual risk, monitoring metric, threshold and review date.
Risk and Assurance
- Control design and operating-effectiveness testing
Maps risks to preventive, detective and corrective controls, then tests design and operation with samples, evidence and defensible findings.
Risk and Assurance
- Evidence collection and audit-ready documentation
Collects, labels and preserves the evidence that a control operated, a decision was made, and a claim can be defended to an auditor or regulator.
Risk and Assurance
- AI audit and independent assurance
Scopes an AI audit, sets criteria, samples, interviews, tests, writes findings with condition, criteria, cause, effect and recommendation, and tracks remediation.
Risk and Assurance
- Regulatory change management
Spots a regulatory change, decides applicability, assigns actions, updates controls and keeps the implementation evidence.
Regulation and Policy
Roles that ask for it
- AI Controls Analyst3 of 5 competencies
- Compliance Analyst3 of 5 competencies
- GRC Associate (AI)3 of 5 competencies
- AI Auditor3 of 5 competencies
- AI Compliance Manager3 of 5 competencies
- AI Compliance Specialist3 of 5 competencies
- Security Compliance Manager3 of 5 competencies
- Senior AI Compliance Analyst3 of 5 competencies
- Chief Audit Executive, AI audit edition3 of 5 competencies
- AI Governance Analyst2 of 5 competencies
- AI Governance Coordinator2 of 5 competencies
- Cybersecurity Risk Analyst2 of 5 competencies
- Governance Analyst2 of 5 competencies
- Third-Party AI Risk Analyst2 of 5 competencies
- AI Governance Engineer2 of 5 competencies
- AI Risk Manager2 of 5 competencies
- Autonomous Systems Governance Lead, robotics and physical AI edition2 of 5 competencies
- Physical AI Safety Engineer, autonomous systems edition2 of 5 competencies
- VP of AI Governance and Ethics2 of 5 competencies
- Privacy Analyst1 of 5 competency
- AI Evaluation Specialist1 of 5 competency
- AI Governance Manager1 of 5 competency
- AI Model Validator1 of 5 competency
- AI Program Manager1 of 5 competency
- AI Incident Response Lead1 of 5 competency
- AI Regulatory Counsel1 of 5 competency
- Model Risk Manager1 of 5 competency
- Responsible AI Lead1 of 5 competency
- Chief Compliance Officer, AI compliance edition1 of 5 competency
- Chief Risk Officer, AI risk edition1 of 5 competency
Where it is taught and graded
84 graded topics, each passed by explaining it back. The first module of every program is free with a free account.
- Module 0: Your First Week in Governance, Risk and Compliance (1)
- Module 1: Integrated Governance, Risk and Compliance and Enterprise Context (1)
- Module 3: Ethics, Culture, Conduct, and Accountability (1)
- Module 7: Internal Control Architecture and Control Engineering (7)
- Module 8: Compliance Management Systems and Regulatory Intelligence (4)
- Module 13: Project, Program, Change, and Transformation Risk (1)
- Module 15: Internal Audit, Assurance, and Evidence (7)
- Module 16: Findings, Issues, Root Cause, and Remediation (1)
- Module 17: AI Governance, AI Risk, AI Security, and AI Assurance (4)
- Module 18: Governance, Risk and Compliance Technology, Automation, and Evidence Engineering (1)
- Module 2: Data Reality (1)
- Module 5: The EU AI Act: The Executive Map (2)
- Module 6: The World's Rulebooks (1)
- Module 7: Agents Under Command (1)
- Module 8: The Money: Budgets, ROI, and Risk (1)
- Module 10: Evidence Engineering (5)
- Module 13: The Capstone: The Board Audit and Viva (1)
- EU AI Act Implementation Expert12 topics
- Module 0: The EU AI Act Expert Role (1)
- Module 2: AI System Inventory and Classification (2)
- Module 3: High-Risk AI Requirements: The Technical File (3)
- Module 8: Post-Market Monitoring and Enforcement (3)
- Module 9: Capstone: The Compliance Portfolio (3)
- Module 3: Consent, Purpose, and the Law of Data (1)
- Module 4: Feeding the Machines (1)
- Module 5: Poison, Leaks, and the Adversary (1)
- Module 6: Access and the Keys (1)
- Module 8: Lineage Under Audit (4)
- Module 14: The Estate Audit (2)
- Module 3: Bounding by Design (1)
- Module 6: Testing and Red-Teaming (2)
- Module 7: Rollout, Monitoring, and Incident Response (2)
- Module 8: Multi-Agent Governance (1)
- Module 10: The Law and the Regulators (1)
- Module 11: The Capstone: Deploy and Defend (1)
- Module 3: Generative AI Compliance (1)
- Module 4: AI Content Labeling (2)
- Module 6: Ethics Review (1)
- Module 8: Enforcement and Incident Response (1)
- Module 10: Capstone: Build a China Compliance Program (1)
- Module 8: Governance and Responsible AI (2)
- Module 15: Lab: Regulated Industries (1)
- Module 16: Lab: Regional and Geopolitical AI (1)
- Module 3: Ethical and Responsible AI and Operational Governance (1)
- Module 5: Critical Thinking and Context Engineering (1)
- Senior AI Scam Defense1 topic
- Module 10: CSFDP: Threat Command and Reporting Law (1)
- Module 13: Legal Frameworks and Liability Navigation (1)
Questions
- What does evidence documentation cover in AI governance?
- 5 competencies are filed under it: AI risk register and treatment tracking, Control design and operating-effectiveness testing, Evidence collection and audit-ready documentation, AI audit and independent assurance, Regulatory change management. Each has its own page saying what it means in practice.
- Which roles ask for evidence documentation?
- 30 roles on the map name at least one of its competencies, from analyst seats to executive ones. Each role page lists the depth expected.
- Where is evidence documentation taught and graded?
- 84 graded topics teach it across 10 programs. Each topic is graded by explaining it back against its own transcript, so a pass is evidence, not attendance. The first module of every program is free with a free account.