Doshi AI Governance in Practice

Build responsible, audit-ready programs with ISO/IEC 42001, NIST AI RMF, and lifecycle controls
1. Auflage 2026
ISBN: 978-1-80730-080-7
Verlag: Packt Publishing
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 250 Seiten

Turn AI governance principles, standards, and regulatory requirements into a practical program that operates across the AI lifecycle.
This book shows you how to build responsible AI governance around ISO/IEC 42001, the NIST AI RMF, OECD AI Principles, the EU AI Act, and other frameworks. You'll conduct AI risk and impact assessments, define governance roles and decision rights, establish policies and lifecycle controls, and create documentation for transparency, accountability, and AI compliance.
You'll apply governance through development, deployment, monitoring, and retirement; address AI security and safety; prepare for AI incidents; and use AI audits and monitoring findings to strengthen controls. Practical scenarios, templates, checklists, and step-by-step guidance turn frameworks into repeatable organizational practices.
Written by Hemang Doshi, who has more than 20 years of experience in system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management, this book connects governance frameworks with practical implementation. By the end, you'll be able to build an accountable, audit-ready AI governance program and integrate AI risk management with existing compliance, security, privacy, and risk processes.

Autoren/Hrsg.

Doshi, Hemang

Leseproben

Preface

Turn AI governance principles, standards, and regulatory requirements into a practical program that operates across the AI lifecycle.

This book shows you how to build responsible AI governance around ISO/IEC 42001, the NIST AI RMF, OECD AI Principles, the EU AI Act and other frameworks. You'll conduct AI risk and impact assessments, define governance roles and decision rights, establish policies and lifecycle controls, and create documentation for transparency, accountability, and AI compliance.

You'll apply governance through development, deployment, monitoring, and retirement; address AI security and safety; prepare for AI incidents; and use AI audits and monitoring findings to strengthen controls. Practical scenarios, templates, checklists, and step-by-step guidance turn frameworks into repeatable organizational practices.

Written by Hemang Doshi, who has more than 20 years of experience in system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management, this book connects governance frameworks with practical implementation. By the end, you'll be able to build an accountable, audit-ready AI governance program and integrate AI risk management with existing compliance, security, privacy, and risk processes.

Who this book is for

AI governance, compliance, and risk management professionals responsible for overseeing AI systems, evaluating AI risks, or implementing responsible AI practices, along with data scientists, ML engineers, internal auditors, privacy leaders, and technology executives. A foundational understanding of AI concepts, basic IT risk principles, and organizational policies or governance frameworks is recommended. This book also provides a strong foundation for AI GRC certifications such as AIGP, AAIA, AAIR, AAISM, AIMS and others.

What this book covers

, , introduces the fundamentals of AI, its key concepts, types, applications, and lifecycle. It provides a foundation for understanding AI systems, risks, and governance.

, , introduces the fundamentals of AI governance, its objectives, key principles, and the importance of establishing effective governance practices.

, , introduces the key principles of responsible AI, including fairness, transparency, accountability, privacy, safety, and human oversight.

, , provides an overview of ISO/IEC 42001, NIST AI RMF, OECD AI Principles, and the EU AI Act.

, , introduces ISO/IEC 42001 and explains its key requirements for establishing and maintaining an AI management system.

, , introduces the NIST AI Risk Management Framework and its approach to managing AI-related risks and promoting trustworthy AI.

, , introduces the OECD AI Principles and their role in promoting innovative, trustworthy, and human-centered AI.

, , introduces the EU AI Act, its risk-based approach, key requirements, and obligations for AI systems.

, , explains the purpose and process of assessing the potential impacts of AI systems on individuals, organizations, and society.

, , explains how to identify, assess, prioritize, and manage risks associated with AI systems.

, , compares ISO/IEC 42001 and the EU AI Act, highlighting their key similarities and differences.

, , explains the roles, responsibilities, accountability, and organizational structure required for effective AI governance.

, , introduces the key policies, procedures, records, and other documentation required to support AI governance.

, , explains how governance practices can be integrated throughout the AI system lifecycle, from planning and development to deployment and retirement.

, , introduces key security risks and controls for protecting AI systems, data, models, infrastructure, and supporting services.

, , explains how organizations can identify, respond to, manage, and learn from AI-related incidents.

, , introduces the principles and practices for auditing AI systems, governance processes, risks, controls, and compliance.

To get the most out of this book

You should have a basic understanding of IT, cybersecurity, risk management, and governance. No advanced AI knowledge is required.

The book includes practical examples and templates to help you understand and apply AI governance concepts. You should also refer to the latest versions of relevant standards and regulations, as they may change over time.

Download the example code files

This book includes a complete downloadable code bundle containing all the example projects and files used throughout the chapters. We recommend downloading the bundle so you can follow along smoothly and experiment with the examples.

Use the bundle as a practical starting point. Modify it, extend it, and apply what you learn by creating your own variations as you progress through the chapters.

Get the code bundle

If you bought the book directly from Packt:

1. Go to packtpub.com
2. Click your profile picture and select Your Orders
3. Find this book and click Download Code

If you bought this book from Amazon or any other channel partner:

1. Go to packtpub.com/unlock or scan the following QR code
2. Search for this book
3. Sign up or log in to your free Packt account
4. Upload your proof of purchase and download the code bundle locally

Usage note: You're free to use and modify this code for personal learning and non-commercial projects.

Download the color images

We also provide a PDF file that has color images of the screenshots/diagrams used in this book. You can download it here: https://packt.link/gbp/9781807300814.

Conventions used

There are a number of text conventions used throughout this book.

Bold: Indicates a new term, an important word, or words that you see on the screen. For instance, words in menus or dialog boxes appear in the text like this. For example: "An AI system primarily consists of three elements: data, algorithm, and model."

Warnings or important notes appear like this.

Tips and tricks appear like this.

Get in touch

Feedback from our readers is always welcome.

General feedback: If you have questions about any aspect of this book or have any general feedback, please email us at and mention the book's title in the subject of your message.

Errata: Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you have found a mistake in this book, we would be grateful if you reported this to us. Please visit http://www.packt.com/submit-errata, click Submit Errata, and fill in the form.

Piracy: If you come across any illegal copies of our works in any form on the internet, we would be grateful if you would provide us with the location address or website name. Please contact us at with a link to the material.

If you are interested in becoming an author: If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, please visit .

Share your thoughts

Once you've read , we'd love to hear your thoughts! Scan the QR code below to go straight to the Amazon review page for this book and share your feedback.

https://packt.link/r/1807300811

Your review is important to us and the tech community and will help us make sure we're delivering excellent quality content.

Free benefits with your book

This book includes free benefits designed to support your learning and help you apply what you learn effectively. Activate them now for instant access (see the section for instructions).

Here's a quick overview of what you can...