Cyber & IT Supervisory Forum - Additional Resources

Establish policies that promote effective challenge of AI system design, implementation, and deployment decisions, via mechanisms such as the three lines of defense, model audits, or red-teaming – to minimize workplace risks such as groupthink. Establish policies that incentivize safety-first mindset and general critical thinking and review at an organizational and procedural level. Establish whistleblower protections for insiders who report on perceived serious problems with AI systems. Establish policies to integrate a harm and risk prevention mindset throughout the AI lifecycle. To what extent has the entity documented the AI system’s development, testing methodology, metrics, and performance outcomes? Are organizational information sharing practices widely followed and transparent, such that related past failed designs can be avoided? Are training manuals and other resources for carrying out incident response documented and available? Are processes for operator reporting of incidents and near-misses documented and available? Datasheets for Datasets. GAO-21-519SP: AI Accountability Framework for Federal Agencies & Other Entities. WEF Model AI Governance Framework Assessment 2020. Organizations can document the following: Transparency & Documentation AI Transparency Resources Bd. Governors Fed. Rsrv. Sys., Supervisory Guidance on Model Risk Management, SR Letter 11-7 (Apr. 4, 2011) Patrick Hall, Navdeep Gill, and Benjamin Cox, “Responsible Machine Learning,” O’Reilly Media, 2020. URL References

32