AI systems are moving from experimentation into enterprise-critical operations. The question is no longer whether to govern them but how — without strangling innovation. *AI and IT Governance* provides a rigorous, immediately applicable answer: a unified framework that bridges classical IT governance (COBIT, ITIL, ISO/IEC 38500) with the demands of machine learning lifecycle management, EU AI Act compliance, and responsible AI deployment. Across 19 chapters and five parts, the monograph spans foundations, key components, implementation, real-world case studies, and the future of AI governance:
Ethics & algorithmic bias — three case studies (healthcare, mortgage lending, content moderation) reveal where governance gaps form and how to close them; a dedicated section on dual-use AI capabilities and cybersecurity (Claude Mythos) rounds out the ethical frontier.
Regulatory landscape — EU AI Act risk tiers, GDPR interaction, ISO/IEC 42001 conformity assessment, and an international comparison across major jurisdictions.
Risk management — adversarial threats, model drift monitoring, and a risk portfolio approach calibrated to harm potential.
Data governance — lineage, quality dimensions, feedback loops, and GDPR-compatible data-role assignments.
Organisational model — role catalogue, RACI templates, three-lines-of-defence integration, and committee mandates ready for immediate use.
AI project lifecycle — shift-left governance, quality gates G0–G5, change management, and structured decommissioning.
Personnel & culture — competency model, psychological safety, and incentive design for a sustainable governance mindset.
ISO/IEC 42001 — AIMS implementation roadmap and clause-level mapping to the IKI-Gov reference model.
IKI-Gov reference model — the book's core contribution: six governance domains × six lifecycle phases × six measurement points, with a companion open-source CLI assessment tool (presidio-hardened-ikigov-assess).
Why This Book
Integrates strategy, law, ethics, data, and operations in one coherent model — no silo approach
Regulation-aware as of Q1 2026 (EU AI Act, ISO/IEC 42001, GDPR)
43 schematic figures, workshop-ready checklists, and quality-gate templates for direct application
IKI-Gov assessment tool freely available as open-source CLI
Target group
CIOs, CAIOs, and AI product owners seeking strategic clarity; compliance, legal, and data-protection teams navigating EU AI Act and GDPR obligations; data scientists and MLOps engineers who need governance context for their daily work; risk managers and internal auditors building AI-specific control frameworks; and graduate students in information management, business informatics, or law.
AI systems are moving from experimentation into enterprise-critical operations. The question is no longer whether to govern them but how — without strangling innovation. *AI and IT Governance* provides a rigorous, immediately applicable answer: a unified framework that bridges classical IT governance (COBIT, ITIL, ISO/IEC 38500) with the demands of machine learning lifecycle management, EU AI Act compliance, and responsible AI deployment. Across 19 chapters and five parts, the monograph spans foundations, key components, implementation, real-world case studies, and the future of AI governance:
Ethics & algorithmic bias — three case studies (healthcare, mortgage lending, content moderation) reveal where governance gaps form and how to close them; a dedicated section on dual-use AI capabilities and cybersecurity (Claude Mythos) rounds out the ethical frontier.
Regulatory landscape — EU AI Act risk tiers, GDPR interaction, ISO/IEC 42001 conformity assessment, and an international comparison across major jurisdictions.
Risk management — adversarial threats, model drift monitoring, and a risk portfolio approach calibrated to harm potential.
Data governance — lineage, quality dimensions, feedback loops, and GDPR-compatible data-role assignments.
Organisational model — role catalogue, RACI templates, three-lines-of-defence integration, and committee mandates ready for immediate use.
AI project lifecycle — shift-left governance, quality gates G0–G5, change management, and structured decommissioning.
Personnel & culture — competency model, psychological safety, and incentive design for a sustainable governance mindset.
ISO/IEC 42001 — AIMS implementation roadmap and clause-level mapping to the IKI-Gov reference model.
IKI-Gov reference model — the book's core contribution: six governance domains × six lifecycle phases × six measurement points, with a companion open-source CLI assessment tool (presidio-hardened-ikigov-assess).
Why This Book
Integrates strategy, law, ethics, data, and operations in one coherent model — no silo approach
Regulation-aware as of Q1 2026 (EU AI Act, ISO/IEC 42001, GDPR)
43 schematic figures, workshop-ready checklists, and quality-gate templates for direct application
IKI-Gov assessment tool freely available as open-source CLI
Target group
CIOs, CAIOs, and AI product owners seeking strategic clarity; compliance, legal, and data-protection teams navigating EU AI Act and GDPR obligations; data scientists and MLOps engineers who need governance context for their daily work; risk managers and internal auditors building AI-specific control frameworks; and graduate students in information management, business informatics, or law.
IKI-Gov: 6 governance domains × 6 lifecycle phases × 6 measurement points, fully mapped to EU AI Act, ISO 42001, GDPR Every governance concept backed by a directly usable artefact: RACI templates, role catalogues, quality-gate checklists Regulatory depth combined with insider practitioner voice. EU AI Act, ISO/IEC 42001, GDPR, and their interaction