{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:aab1bde82a904f5eba9b2ae83229f011b64af87ef752b3180189fa1124799384","slug":"grc-ai-governance-framework-roles-obligations-review","url":"/assets/agent_workflow-grc-ai-governance-framework-roles-obligations-review-b10b5f47.19abf3bce2df66f6.json"},"kind":"record","record":{"attributes":{"department":"ai-governance","domain":"grc","lineOfDefense":"operate"},"canonicalUrl":"https://workflow-library.com/all/?w=grc-ai-governance-framework-roles-obligations-review","description":"AI Governance Framework, Roles & Obligations Review as a modular, decision-aware workflow. Each quarterly instance runs on the existing \"AI Governance Program\" Process item (process_type operational, quarterly, process_owner = AI Governance Officer) and enriches its standing registers — it never recreates them. It keeps the AI policy current and republished, refreshes the RACI and competency records, maintains each AI system's resource and dependency inventory, and walks the value-chain obligations register so every provider and deployer duty traces to an owner and evidence. Consumes at launch: the cycle trigger (interval, folded-in annual re-approval, or a regulatory/technology change) and prior-cycle registers — the AI policy as a Policy item (framework iso-42001 + eu-ai-act, domains ai_governance), the obligations register as EU AI Act / ISO 42001 Control items (control_owner = obligation owner), plus the in-scope AI system list, the RACI and competency register, and the per-system resource inventory, which have no native item type and travel as versioned step documents. Deliverables: the republished AI policy version, the refreshed RACI and competency register, the current resource and dependency inventory, the walked obligations register, and a four-area cycle evidence package. In scope: those four governance registers for the AI systems in boundary this quarter; out of scope: the AI systems' own development, risk assessment, and control testing. Terminal — no downstream workflow consumes the output; the cycle closes to its own archived workflow record, linked back to the anchor Process item.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=grc-ai-governance-framework-roles-obligations-review","capabilities":[],"controls":["UC-AI-01","UC-AI-02","UC-AI-03","UC-AI-13"],"domains":["grc"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:aab1bde82a904f5eba9b2ae83229f011b64af87ef752b3180189fa1124799384","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-ai-governance-framework-roles-obligations-review","standards":["iso-42001","eu-ai-act","aiuc-1"],"teams":["ai-governance","executive"]},"id":"wf:G31","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AG31","slug":"grc-ai-governance-framework-roles-obligations-review","sourceIds":["aiuc-1","eu-ai-act","iso-42001"],"sourceUrl":null,"title":"AI Governance Framework, Roles & Obligations Review","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:07dc1fe53b324044692765d5bf12dc89ca7588ba81609242e46b5ab607f3d645","properties":{},"sourceDetailPath":"/data/v1/records/wf-g31-74d18d48.json","sourceId":"wf:G31","targetDetailPath":"/data/v1/records/uc-uc-ai-01-156cdd4f.json","targetId":"uc:UC-AI-01","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:19d6bbebafa004d61ac1ef893e6cfc9d93676c4aa56124e703c017902a8f51ea","properties":{},"sourceDetailPath":"/data/v1/records/wf-g31-74d18d48.json","sourceId":"wf:G31","targetDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","targetId":"uc:UC-AI-03","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1d9a326fae818ef50d3cc13cf22d333b47f4920adc753b951baf0855b89807aa","properties":{},"sourceDetailPath":"/data/v1/records/wf-g31-74d18d48.json","sourceId":"wf:G31","targetDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","targetId":"uc:UC-AI-02","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ac172b28d4ffcf3709fa2526d8c3233451689e3c7cf1977403a2436f7844d93a","properties":{},"sourceDetailPath":"/data/v1/records/wf-g31-74d18d48.json","sourceId":"wf:G31","targetDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","targetId":"uc:UC-AI-13","type":"operates"}],"schemaVersion":1}