Feature: Integrate spec into existing governance frameworks

[cindyli]

Is your feature request related to a problem?

In the "Governance Strategies" section, Michael Karlin suggested: Consider how to integrate this into existing governance frameworks employed by industry, ie NIST, ISO 42001.

Describe the solution you'd like

Consider how to better address Michael's suggestion

Describe alternative solutions you've considered

No response

Additional context or notes

All comments from Michael Karlin can be found in this Word document.

[vr619536]

This comment can be viewed as a future direction for Trust Meter and not something that should directly change the draft. For reference:

ISO/IEC 42001 is an international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS) within organizations. It is designed for entities providing or utilizing AI-based products or services, ensuring responsible development and use of AI systems.
Why is ISO/IEC 42001 important?

ISO/IEC 42001 is the world’s first AI management system standard, providing valuable guidance for this rapidly changing field of technology. It addresses the unique challenges AI poses, such as ethical considerations, transparency, and continuous learning. For organizations, it sets out a structured way to manage risks and opportunities associated with AI, balancing innovation with governance.

While we could reference that these kinds of frameworks exist, in my view, it is preferable to leave the risk assessment recommendation in the draft as is rather than reference standards that are behind a paywall.