Strategy & governance

Policy register

Ten AI and automation policies with owner, status, version, review date and the standards they implement (EU AI Act, ISO/IEC 42001, NIST AI RMF, GDPR, DORA).

Policies

• POL-01 AI acceptable use policy — ISO/IEC 42001 · EU AI Act Art. 4
• POL-02 Agentic AI autonomy & HITL policy — EU AI Act Art. 14 · NIST AI RMF (Manage)
• POL-03 Model risk management standard — ISO/IEC 23894 · NIST AI RMF
• POL-04 Hallucination control & grounding policy — ISO/IEC 42001 A.6 · EU AI Act Art. 15
• POL-05 Data protection for AI (GDPR) — GDPR Art. 22, 25, 35
• POL-06 AI security standard — ISO/IEC 27001 · OWASP LLM Top 10 · MITRE ATLAS
• POL-07 Third-party model & vendor policy — DORA Art. 28 · ISO/IEC 27036
• POL-08 Automation bot lifecycle standard — ITIL 4 · COBIT 2019
• POL-09 AI change & release management — ITIL 4 · ISO/IEC 20000
• POL-10 AI records, logging & audit — EU AI Act Art. 12 · ISO/IEC 27001 A.8.15

Public demo with fictional data (Example Group). © 2025–2026 Russo-Got Marius Mihail & PIR2-IT. All rights reserved.

AIHA Office

More in this demo

• Executive dashboard
• Executive summary generator
• Portfolio: idea → retire
• Governance & gates
• RACI
• Guardrails catalogue
• Risk register
• Complexity & costs
• V&V
• Reference architecture
• AI engines & model choice
• Training on institutional culture
• Agentic workflow & HITL
• Hallucination control
• AI security & threats
• Lessons learned
• e-Learning