Conformity Assessment
PRACTICE
AI GOVERNANCE
Under the EU AI Act, this procedure checks that a high-risk AI system meets mandatory requirements through internal control or a notified body review.
PRACTICE
AI GOVERNANCE
AI System Inventory
A maintained register of the AI systems an organization develops, buys or uses, recording owners, purposes, data, risk level and status.
BUSINESS RELEVANCE
Risk classification, EU AI Act obligations and ISO/IEC 42001 controls all depend on knowing which AI systems exist; without an inventory, unapproved tools and vendor AI features go unassessed and accountability for them stays unclear.
IMPLEMENTATION EXAMPLE
A 200-person firm surveys departments and reviews SaaS invoices, finds 34 AI uses including 9 unapproved chat tools, records owner, purpose, data categories, vendor and EU AI Act risk class for each, and reviews the register every quarter.
LIMITATIONS
Inventories go stale quickly as vendors add AI features to existing software, and self-reported surveys miss Shadow AI. A register is only useful when each entry links to assessments, controls and an accountable owner rather than serving as a static list.
TECHNICAL EXPLANATION
The NIST AI RMF Playbook describes an AI system inventory as an organized database of artifacts about each system, such as documentation, data dictionaries, incident response plans, links to code and responsible contacts. Typical fields add intended purpose, deployment context, data sources, risk tier and lifecycle stage. The register defines the scope of an AI Management System and supports EU AI Act roles, for example identifying which high-risk systems must be registered in the EU database under Article 49.
Secondary Topics
Cybersecurity, Data Engineering
Sources
NIST AI Resource Center — AI RMF Playbook: Govern (GOVERN 1.6) — https://airc.nist.gov/airmf-resources/playbook/govern/; EU Artificial Intelligence Act — Article 49: Registration — https://artificialintelligenceact.eu/article/49/
Related terms
Prompt Engineering
PRACTICE
INTELLIGENT AUTOMATION
Prompt engineering structures instructions, roles, examples and context for language models, then tests prompt versions against evaluations to improve output.
Link Building
PRACTICE
SEARCH OPTIMIZATION
Link building covers outreach, digital PR, guest content and linkable assets used to earn backlinks, within the limits set by Google's link spam policies.
Growth Hacking
PRACTICE
REVENUE OPERATIONS
A rapid experimentation discipline across product and marketing funnels to discover cost-effective user acquisition channels.
Marketing Attribution
PRACTICE
PERFORMANCE ADVERTISING
The analytical practice of assigning value and revenue credit across the marketing channels and touchpoints that precede conversion events.