[{"_1":2,"_68":-5,"_69":-5},"loaderData",{"_3":4,"_38":39,"_66":-5,"_67":-5},"root",{"_5":-5,"_6":-5,"_7":8,"_22":23,"_24":25,"_26":27,"_30":31,"_36":37},"user","shoppingCartId","shoppingCart",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":14},"id","no-cart","count",0,"free",true,"updatedAt","","paymentGateway","STRIPE","cartItems",[],"loading","locale","en","readerTheme","light","constants",{"_28":29},"paypalClientId","AX53Cwz8jR6rVVzzZiZNWWXl0dGagi-GZrjG-S3Ua14E5nrKMn7DxDQ730O4R8LusLPp49ALn6aRVaEy","publishers",{"_32":33,"_34":35},"companies",[],"universities",[],"needsLocaleCookieSync",false,"routes/_store+/_readers+/email_author.$slug/route",{"_40":41,"_65":-5},"book",{"_9":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6Qm9va1Byb2R1Y3QvNzc2NTQ","title","AI Governance Frameworks : NIST AI RMF - ISO 42001 - EU AI ACT - OECD AI PRINCIPLES","state","published","contactAuthorMethod","email","aboutText","

AI governance has moved from a conference talking point to a board-level obligation — and the practitioners responsible for delivering on it are often working with incomplete, contradictory, or over-simplified information.

This guide cuts through the noise. It gives risk managers, compliance officers, AI leads, consultants, and executive learners a clear, honest account of the four frameworks they are most likely to encounter in practice: the NIST AI Risk Management Framework, ISO/IEC 42001:2023, the EU AI Act, and the OECD AI Principles.

Each framework is covered in depth — what it is, what it actually requires, how organisations are using it, and where practitioners most commonly go wrong. Every chapter closes with a quick-start checklist you can act on immediately.

Running throughout the book is a fictional but realistic case study: NovaCred, a Singapore-headquartered FinTech whose credit scoring engine, CreditIQ, lands squarely in the EU AI Act's high-risk category — mid-integration with a German bank client, and with no conformity assessment in place. You'll follow NovaCred from compliance gap to certification-ready, and see exactly which steps apply to your own organisation's situation.

A dedicated chapter tackles the question practitioners almost always ask but rarely find answered: how do these four frameworks relate to each other, and in what order should you implement them? The book closes with a concrete 90-day action plan so you can move from understanding to action.

The appendices include ready-to-use templates: an AI System Inventory Register, NIST AI RMF Risk Register, ISO 42001 Gap Analysis Scorecard, EU AI Act Compliance Gap Tracker, OECD Policy Mapping worksheets, a 14-dimension Framework Comparison Master Table, and a glossary of 35 key terms.

Who this book is for: Risk managers and compliance officers being asked to assess AI governance maturity for the first time. AI leads and technical architects who need to understand governance obligations without weeks inside standards documents. Consultants building AI governance practices. MBA students and executive learners developing strategic fluency in this space.

No machine learning background required — but a willingness to engage with specifics is.

","authors",[53],{"_9":54,"_55":56,"_5":57},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6UHJvZHVjdEF1dGhvci84MzA1OA","name","Srinivas Bommena",{"_58":59},"avatar",{"_60":61,"_62":63,"_64":14},"url","https://secure.gravatar.com/avatar/14b8fb087bb19c161d97fa95b85d011a?r=pg&d=mm","styleName","medium","exists","currentUser","routes/_store+/_layout","routes/_store+/_readers+/_layout","actionData","errors"]

Email the Author