AI Governance and Risk bibliography

Peer-reviewed journals · 6

1. European Union (2024). Regulation (EU) 2024/1689 (Artificial Intelligence Act). Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
2. European Union (2024). Regulation (EU) 2024/1689 (Artificial Intelligence Act), consolidated text. Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
3. European Union (2024). Regulation (EU) 2024/1689, Article 5. Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
4. European Union (2024). Regulation (EU) 2024/1689, Articles 9 through 15 and Annex III. Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
5. European Union (2024). Regulation (EU) 2024/1689, Articles 51 through 56. Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
6. European Union (2024). Regulation (EU) 2024/1689, complete consolidated text. Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/ojCited in 2 modules

Standards-body + government · 26

1. Cybersecurity and Infrastructure Security Agency, National Security Agency, & partner agencies (2024). Deploying AI Systems Securely. CISA. https://www.cisa.gov/resources-tools/resources/deploying-ai-systems-securely
2. ISACA (2024). Advanced in AI Audit (AAIA) credential. ISACA. https://www.isaca.org/credentialing/aaia
3. ISACA (2024). Information Systems Audit and Control Association: AI audit practice guidance. ISACA. https://www.isaca.org/resources/news-and-trends/ai
4. ISACA (2024). Advanced in AI Audit (AAIA) body of knowledge. ISACA. https://www.isaca.org/credentialing/aaia
5. ISACA (2024). Audit planning practice guidance. ISACA. https://www.isaca.org/resources
6. ISACA (2024). Advanced in AI Audit (AAIA) program design references. ISACA. https://www.isaca.org/credentialing/aaia
7. International Organization for Standardization (2018). ISO 31000:2018 Risk management, Guidelines. ISO. https://www.iso.org/standard/65694.html
8. International Organization for Standardization (2018). ISO 31000:2018, Section 6.5. ISO. https://www.iso.org/standard/65694.html
9. International Organization for Standardization (2022). ISO/IEC 27001:2022 Information security management systems, Requirements. ISO. https://www.iso.org/standard/27001
10. International Organization for Standardization (2023). ISO/IEC 42001 Information technology, Artificial intelligence, Management system. ISO. https://www.iso.org/standard/81230.html
11. International Organization for Standardization (2023). ISO/IEC 42001:2023 Information technology, Artificial intelligence, Management system. ISO. https://www.iso.org/standard/81230.html
12. International Organization for Standardization (2023). ISO/IEC 42001 certification process documentation. ISO. https://www.iso.org/standard/81230.html
13. International Organization for Standardization (2023). ISO/IEC 23894:2023 Information technology, Artificial intelligence, Guidance on risk management. ISO. https://www.iso.org/standard/77304.htmlCited in 2 modules
14. International Organization for Standardization (2023). ISO/IEC 5338:2023 Information technology, Artificial intelligence, AI system life cycle processes. ISO. https://www.iso.org/standard/81118.html
15. International Organization for Standardization (2023). ISO/IEC 42001:2023 Annex A controls. ISO. https://www.iso.org/standard/81230.html
16. International Organization for Standardization (2023). ISO/IEC 42001 Clause 6.1, Actions to address risks and opportunities. ISO. https://www.iso.org/standard/81230.html
17. International Organization for Standardization (2023). ISO/IEC 42001 Clause 5, Leadership. ISO. https://www.iso.org/standard/81230.html
18. International Organization for Standardization (2023). ISO/IEC 42001 Clauses 5 and 6. ISO. https://www.iso.org/standard/81230.html
19. National Institute of Standards and Technology (2023). AI Risk Management Framework (NIST AI 100-1). NIST. doi:10.6028/NIST.AI.100-1Cited in 2 modules
20. National Institute of Standards and Technology (2023). AI Risk Management Framework (NIST AI 100-1), Section 3. NIST. doi:10.6028/NIST.AI.100-1
21. National Institute of Standards and Technology (2023). AI Risk Management Framework (NIST AI 100-1) and AI 600-1 subcategory tables. NIST. doi:10.6028/NIST.AI.100-1
22. National Institute of Standards and Technology (2023). AI Risk Management Framework, Manage function. NIST. doi:10.6028/NIST.AI.100-1
23. National Institute of Standards and Technology (2024). Generative AI Profile (NIST AI 600-1). NIST. doi:10.6028/NIST.AI.600-1Cited in 2 modules
24. National Institute of Standards and Technology (2024). AI Risk Management Framework Crosswalks. NIST. https://www.nist.gov/itl/ai-risk-management-framework
25. National Institute of Standards and Technology (2024). Generative AI Profile (NIST AI 600-1) risk categories. NIST. doi:10.6028/NIST.AI.600-1
26. National Institute of Standards and Technology (2024). AI Risk Management Framework Playbook. NIST. https://airc.nist.gov/AI_RMF_Knowledge_Base/Playbook

Books + monographs · 1

1. Kolb, D. A. (1984). Experiential Learning: Experience as the Source of Learning and Development. Prentice-Hall.

Other primary sources · 10

1. Institute of Internal Auditors (2017). International Professional Practices Framework. IIA. https://www.theiia.org/en/standards/
2. Institute of Internal Auditors (2017). International Professional Practices Framework, Performance Standards. IIA. https://www.theiia.org/en/standards/
3. Committee of Sponsoring Organizations of the Treadway Commission (2017). Enterprise Risk Management, Integrating with Strategy and Performance. COSO. https://www.coso.org/erm-framework
4. Committee of Sponsoring Organizations of the Treadway Commission (2017). ERM Framework, Performance section. COSO. https://www.coso.org/erm-framework
5. Committee of Sponsoring Organizations of the Treadway Commission (2017). ERM Framework, Performance. COSO. https://www.coso.org/erm-framework
6. Organisation for Economic Co-operation and Development (2024). OECD AI Principles (updated 2024). OECD. https://oecd.ai/en/ai-principles
7. Project Management Institute (2021). A Guide to the Project Management Body of Knowledge (PMBOK Guide), Seventh Edition. PMI. https://www.pmi.org/pmbok-guide-standards/foundational/pmbok
8. Mitchell, M., Wu, S., Zaldivar, A., Barnes, P., Vasserman, L., Hutchinson, B., et al. (2019). Model cards for model reporting. Conference on Fairness, Accountability, and Transparency. https://arxiv.org/abs/1810.03993
9. International Association of Privacy Professionals (2024). Artificial Intelligence Governance Professional (AIGP) body of knowledge. IAPP. https://iapp.org/certify/aigp/
10. International Association of Privacy Professionals (2024). AIGP body of knowledge and program design references. IAPP. https://iapp.org/certify/aigp/