AI Governance Policy Pack
Three AI regimes landed at once — the EU AI Act, NIST AI RMF and ISO/IEC 42001 — and most teams are staring at a blank page. Describe an AI system in eight answers and get its EU AI Act risk tier plus a control set that is cross-mapped to all three frameworks, ready to paste into your policy repository.
What this tool is
- Answer a short questionnaire about an AI system and get an EU AI Act risk classification plus a tailored control set.
- Every control is mapped across three regimes at once: NIST AI RMF function (Govern / Map / Measure / Manage), ISO/IEC 42001 clause, and the relevant EU AI Act article.
- High-risk systems get the full obligation set (risk management, data governance, human oversight, logging, transparency); limited and minimal risk get the proportionate subset.
- Copy the generated pack straight into your policy repository. Pro tool, included with any PlayCISO paid plan.
Frequently asked questions
What is the AI Governance Policy Pack?
A Pro tool that turns a short description of an AI system into a governance starting point: it classifies the system under the EU AI Act (prohibited / high / limited / minimal risk) and generates a control set tailored to that tier, with every control mapped to a NIST AI RMF function, an ISO/IEC 42001 clause and the relevant EU AI Act article so the output is audit-traceable.
Which frameworks does it cover?
Three at once. The EU AI Act for risk classification and legal obligations, the NIST AI Risk Management Framework (Govern, Map, Measure, Manage) for how to organise the work, and ISO/IEC 42001 (AI management system) clauses so it slots into a certifiable management system. The three are cross-referenced on each control.
Is this legal advice?
No. It is an accelerator that gives you a defensible, framework-mapped first draft of your AI governance posture for a system. Classifications are heuristic and should be confirmed with your legal and compliance teams before relying on them, especially for high-risk or prohibited categories.
Is it free?
No. This is a Pro tool included with any PlayCISO paid plan. The page explains what it produces; the interactive generator unlocks with a subscription.