ai-governance

name	AI Governance
description	Comprehensive AI risk management, EU AI Act compliance, and LLM usage governance
license	Apache-2.0
version	1.0
author	Hack23 AB
tags	["ai-governance","eu-ai-act","llm-security"]
category	security
frameworks	["EU AI Act","ISO 27001:2022","NIST AI RMF"]
related_policies	["AI_Policy.md"]

🤖 AI Governance Skill

🎯 Purpose

Enforce comprehensive AI risk management and EU AI Act compliance, based on AI Policy.

Key Principle: "AI systems require systematic risk management and human oversight."

📚 Scope

• 🤖 AI System Classification (EU AI Act risk levels)
• 🛡️ LLM Usage Governance (GitHub Copilot, ChatGPT)
• 👁️ Human Oversight Requirements
• ⚖️ Bias and Fairness Controls
• 📊 AI Risk Assessment
• 🔍 Transparency and Explainability

⚙️ Security Rules

MUST Requirements

ai_system_classification:
  unacceptable_risk:
    prohibited_systems:
      - social_scoring: government_or_private_social_credit
      - real_time_biometric: public_space_surveillance_without_warrant
      - subliminal_manipulation: ai_that_manipulates_behavior
      - exploit_vulnerabilities: ai_targeting_vulnerable_groups
    action: never_develop_deploy_or_use
  
  high_risk_systems:
    examples:
      - recruitment_ai: candidate_screening_or_selection
      - credit_scoring: loan_approval_algorithms
      - law_enforcement: predictive_policing_tools
    requirements:
      - risk_assessment: comprehensive_before_deployment
      - data_quality: high_quality_representative_datasets