AI governance
The newest area on this page, and one I'm learning as I go. Not legal advice: enough to read the frameworks, take part in a review, and point at the safeguards in systems I actually run. CivicGrid's mayor check is the running example: a model proposes, and a person approves every change.
Learning track · 11 lessons
AI governance for engineers
From what AI governance means in practice to writing a use policy. Each lesson ties a framework's rules to everyday engineering, like inventories, data handling, testing and human review, with every rule checked against current sources when the lesson is written.
- 1What AI governance is, in engineering termsStart · 25 min
- 2The NIST AI Risk Management FrameworkStart · 30 min
- 3ISO/IEC 42001: an AI management systemStart · 30 min
- 4The EU AI Act's risk tiersStart · 30 min
- 5U.S. federal AI rules for agenciesStart · 30 min
- 6An AI inventory: what you use, and for whatStart · 35 min
- 7Data: what may go into a promptStart · 35 min
- 8Testing and red-teaming before you trust itStart · 35 min
- 9Human oversight that actually overseesStart · 30 min
- 10Assessing an AI vendorStart · 30 min
- 11Writing an AI use policyStart · 30 min
Guides
Where to start
NIST AI RMF (opens in a new tab)
NIST's framework for managing AI risk, with a profile for generative AI.
From www.kwamib.dev/resources/ai-governance
Git
Linux
Python
SQL
Networking and DNS
Docker
Kubernetes
Terraform
Compliance
CI/CD
Argo CD
Ansible
Monitoring and alerting
Automation
AWS
Security
Local LLMs
Web development
Career and certs