unified
UC-RISK-01 — Establish and maintain a tailored risk management framework
Senior leadership establishes, approves, and visibly sponsors an enterprise risk management framework customized to the organization's external and internal context. The framework design defines accountabilities, resources, and processes for managing risk, and the framework is implemented across the organization on a planned schedule. Where regulated technologies such as high-risk AI systems are in scope, the framework is extended with the required lifecycle-specific risk processes. Approved framework documentation and implementation plans are retained as evidence.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Risk Assessment & Management
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-RISK-01
- title
- Establish and maintain a tailored risk management framework
- statement
- Senior leadership establishes, approves, and visibly sponsors an enterprise risk management framework customized to the organization's external and internal context. The framework design defines accountabilities, resources, and processes for managing risk, and the framework is implemented across the organization on a planned schedule. Where regulated technologies such as high-risk AI systems are in scope, the framework is extended with the required lifecycle-specific risk processes. Approved framework documentation and implementation plans are retained as evidence.
- domain
- Risk Assessment & Management
- control_type
- preventive
- control_category
- administrative
- members
- framework
- iso-31000
- control_id
- 31000-FW1
- coverage
- full
- relationship
- superset_of
- framework
- iso-31000
- control_id
- 31000-FW3
- coverage
- full
- relationship
- superset_of
- framework
- iso-31000
- control_id
- 31000-FW4
- coverage
- full
- relationship
- superset_of
- framework
- iso-31000
- control_id
- 31000-P3
- coverage
- full
- relationship
- superset_of
- framework
- eu-ai-act
- control_id
- AIA-Art9
- coverage
- partial
- delta
- EU AI Act adds AI-lifecycle-specific continuous risk process and testing
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-RISK-01 — Establish and maintain a tailored risk management framework mitigates AI safety failures causing physical or psychological harm
- strength
- related
- rationale
- AI-Act Art 9 lifecycle risk processes in the framework establish the governance under which high-risk-AI safety risks are identified and mitigated.
- UC-RISK-01 — Establish and maintain a tailored risk management framework maps_to AIA-Art9 — Risk management system (high-risk)
- framework
- eu-ai-act
- control_id
- AIA-Art9
- coverage
- partial
- delta
- EU AI Act adds AI-lifecycle-specific continuous risk process and testing
- relationship
- intersects_with
- source_version
- Regulation (EU) 2024/1689
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-RISK-01 — Establish and maintain a tailored risk management framework maps_to 31000-FW1 — Leadership and commitment
- framework
- iso-31000
- control_id
- 31000-FW1
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2018
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-RISK-01 — Establish and maintain a tailored risk management framework maps_to 31000-FW3 — Design
- framework
- iso-31000
- control_id
- 31000-FW3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2018
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-RISK-01 — Establish and maintain a tailored risk management framework maps_to 31000-P3 — Customized
- framework
- iso-31000
- control_id
- 31000-P3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2018
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-RISK-01 — Establish and maintain a tailored risk management framework maps_to 31000-FW4 — Implementation
- framework
- iso-31000
- control_id
- 31000-FW4
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2018
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-RISK-01 — Establish and maintain a tailored risk management framework mitigates Inadequate or absent risk assessment process
- strength
- primary
- rationale
- Establishing/maintaining an ERM framework is the direct antidote to having no systematic process to identify, analyse, evaluate and treat risk.
- UC-RISK-01 — Establish and maintain a tailored risk management framework mitigates Inaccurate, unreliable or hallucinated AI outputs
- strength
- related
- rationale
- EU AI Act Art 9 member extends the framework with a high-risk-AI risk-management system governing identification/mitigation of accuracy risks; framework enables, not operates, the defense.
- Risk & Resilience Framework Governance operates UC-RISK-01 — Establish and maintain a tailored risk management framework