CMComparison matrix
TA-14 AI GOVERNANCE LIBRARY
Governance Comparison Matrix
Compare laws, regulations, standards, frameworks, principles, recommendations, methodologies, and other governance records across type, jurisdiction, publisher, and status while preserving the distinctions between authority, applicability, obligation, and execution.
COMPARISON CONTROL DESK
Filter, sort, select, and inspect.
Select up to four records for a focused comparison. Similar labels do not prove equivalent authority, requirements, scope, evidence expectations, or legal effect.
28Records shown
0/4Comparison slots
COMPLETE RECORD MATRIX
Governance source comparison
Sorted by title · ascending
| Compare | Record | |||||
|---|---|---|---|---|---|---|
| AI Incident Response Practices for identifying, triaging, containing, investigating, documenting, and resolving AI incidents. | guidance | International | TA-14 AI Governance Library | published | View → | |
| Artificial Intelligence and Data Act A proposed Canadian legislative framework intended to regulate high-impact artificial intelligence systems. | law | Canada | Parliament of Canada | published | View → | |
| Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile A companion profile to the NIST AI RMF addressing risks and actions specific to generative artificial intelligence. | guidance | United States | National Institute of Standards and Technology | published | View → | |
| Blueprint for an AI Bill of Rights A nonbinding framework describing protections for people affected by automated systems. | guidance | United States | White House Office of Science and Technology Policy | published | View → | |
| Colorado Artificial Intelligence Act A state law governing developers and deployers of high-risk artificial intelligence systems used in consequential decisions. | law | Colorado, United States | Colorado General Assembly | adopted | View → | |
| COSO Enterprise Risk Management Framework An enterprise risk management framework integrating risk with strategy and organizational performance. | framework | International | Committee of Sponsoring Organizations of the Treadway Commission | published | View → | |
| European Union Artificial Intelligence Act A risk-based legal framework governing the development, placement on the market, deployment, and use of artificial intelligence systems in the European Union. | law | European Union | European Union | adopted | View → | |
| Federal Trade Commission Artificial Intelligence Guidance A body of consumer-protection guidance and enforcement messaging addressing deceptive, unfair, discriminatory, and unsupported AI practices. | guidance | United States | Federal Trade Commission | published | View → | |
| General Data Protection Regulation and Automated Decision-Making European data-protection requirements governing personal data processing, profiling, transparency, and certain solely automated decisions. | law | European Union | European Union | active | View → | |
| IEEE 7000 Model Process for Addressing Ethical Concerns During System Design A standard process for identifying and addressing ethical values and concerns during system and software design. | standard | International | IEEE Standards Association | published | View → | |
| ISO 31000 Risk Management Guidelines General principles, framework, and process guidance for managing risk across organizations. | standard | International | International Organization for Standardization | published | View → | |
| ISO/IEC 22989 Artificial Intelligence Concepts and Terminology An international standard establishing concepts and terminology used across artificial intelligence systems and related standards. | standard | International | ISO and IEC | published | View → | |
| ISO/IEC 23053 Framework for Artificial Intelligence Systems Using Machine Learning A framework describing machine-learning-based AI systems and their components, functions, and relationships. | standard | International | ISO and IEC | published | View → | |
| ISO/IEC 23894 Artificial Intelligence Risk Management International guidance for organizations seeking to identify, assess, treat, monitor, and communicate risks related to artificial intelligence. | standard | International | ISO and IEC | published | View → | |
| ISO/IEC 38507 Governance Implications of the Use of Artificial Intelligence by Organizations Guidance for governing bodies on the organizational implications of using artificial intelligence. | standard | International | ISO and IEC | published | View → | |
| ISO/IEC 42001 Artificial Intelligence Management System An international management system standard specifying requirements for establishing, implementing, maintaining, and continually improving an AI management system. | standard | International | ISO and IEC | published | View → | |
| MITRE ATLAS A knowledge base of adversary tactics and techniques targeting machine-learning and AI systems. | framework | International | MITRE | published | View → | |
| Model Governance Governance practices covering model approval, versioning, validation, monitoring, retirement, and accountability. | guidance | International | TA-14 AI Governance Library | published | View → | |
| New York City Local Law 144 on Automated Employment Decision Tools A local law regulating certain automated employment decision tools used in hiring and promotion decisions. | law | New York City, United States | New York City | active | View → | |
| NIST Artificial Intelligence Risk Management Framework A voluntary framework for managing risks associated with artificial intelligence across organizational and system lifecycles. | framework | United States | National Institute of Standards and Technology | voluntary | View → | |
| OECD Principles on Artificial Intelligence International principles promoting innovative and trustworthy artificial intelligence that respects human rights and democratic values. | principle | International | Organisation for Economic Co-operation and Development | adopted | View → | |
| OMB Memorandum M-24-10: Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence Federal agency guidance establishing governance, innovation, inventory, and risk-management expectations for agency use of artificial intelligence. | guidance | United States | Office of Management and Budget | published | View → | |
| OWASP Top 10 for Large Language Model Applications A community-developed list of significant security risks affecting applications built with large language models. | guidance | International | OWASP Foundation | published | View → | |
| Runtime AI Governance Governance applied while AI systems are executing rather than only before deployment. | architecture | Architecture | TA-14 AI Governance Library | foundational | View → | |
| TA-14 Admissible Execution Architecture An evidence-bound governance architecture that determines whether a proposed action is admissible before execution and preserves the resulting outcome evidence. | architecture | Architecture | TA-14 Authority | foundational | View → | |
| TA-14 Reality-to-Outcome Governance Chain A governance chain expressed as Reality, Record, Continuity, Admissibility, Binding, Commit, Execution, and Outcome. | architecture | Architecture | TA-14 Authority | foundational | View → | |
| UNESCO Recommendation on the Ethics of Artificial Intelligence A global normative instrument addressing the ethical development and use of artificial intelligence. | principle | International | UNESCO | adopted | View → | |
| United Nations Guiding Principles on Business and Human Rights A global framework defining state duties and corporate responsibilities regarding business-related human-rights impacts. | principle | International | United Nations | adopted | View → |
CBComparison boundary
GOVERNANCE COMPARISON BOUNDARY
Comparable does not mean interchangeable.
Governance records may address similar subjects while carrying different authority, scope, terminology, obligations, lifecycle expectations, evidence requirements, enforcement conditions, and legal effects. A comparison matrix supports structured review. It does not itself establish applicability, precedence, equivalence, compliance, certification, or permission to execute.