AI systems

AI System classification

Classification determines the system's regulatory and risk context. It does not decide every activity you must perform.

Classification workflow

  1. 1Answer the classification questions using current system facts.
  2. 2Review the result and the rationale behind it.
  3. 3Save the classification so its history can be understood.
  4. 4When purpose, role, deployment, or impact changes, classify again and assess downstream impact.

Classification vs Governance Plan

  • Classification answers: What regulatory and risk position does this AI System have?
  • Governance Plan answers: Given what we know, what governance work should we perform?

Generic example

A sample decision-support system is used in a high-impact setting. Its purpose, affected people, role, data, and deployment context drive classification; the result then informs oversight, documentation, evidence, testing, and approval activities.

Next stepGenerate the Governance Plan