Hemang Doshi

AI Governance in Practice

Build an audit-ready AI governance program with practical assessments, lifecycle controls, and guidance aligned with ISO/IEC 42001, NIST AI RMF, OECD AI Principles, and the EU AI ActKey FeaturesApply ISO/IEC 42001, NIST AI RMF, OECD AI Principles, and the EU AI Act in practiceConduct AI impact and risk assessments using structured methods and practical templatesBuild audit-ready lifecycle controls, documentation, monitoring, and accountabilityPurchase of the print or Kindle book includes a free PDF eBookBook DescriptionTurn AI governance principles, standards, and regulatory requirements into a practical program that operates across the AI lifecycle.This book shows you how to build responsible AI governance around ISO/IEC 42001, the NIST AI RMF, OECD AI Principles, the EU AI Act, and other frameworks. You'll conduct AI risk and impact assessments, define governance roles and decision rights, establish policies and lifecycle controls, and create documentation for transparency, accountability, and AI compliance.You'll apply governance through development, deployment, monitoring, and retirement; address AI security and safety; prepare for AI incidents; and use AI audits and monitoring findings to strengthen controls. Practical scenarios, templates, checklists, and step-by-step guidance turn frameworks into repeatable organizational practices.Written by Hemang Doshi, who has more than 20 years of experience in system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management, this book connects governance frameworks with practical implementation. By the end, you'll be able to build an accountable, audit-ready AI governance program and integrate AI risk management with existing compliance, security, privacy, and risk processes.What you will learnExplain responsible AI principles and governance lifecycle risksCompare ISO/IEC 42001, NIST AI RMF, OECD, and the EU AI ActConduct structured AI impact and risk assessmentsDefine accountable governance roles and decision rightsCreate policies and lifecycle controls for responsible AIDocument AI systems for transparency and auditabilityPrepare for AI incidents with structured response processesPerform AI audits and improve governance from findingsWho this book is forAI governance, compliance, and risk management professionals responsible for overseeing AI systems, evaluating AI risks, or implementing responsible AI practices, along with data scientists, ML engineers, internal auditors, privacy leaders, and technology executives. A foundational understanding of AI concepts, basic IT risk principles, and organizational policies or governance frameworks is recommended. This book also provides a strong foundation for AI GRC certifications such as AIGP, AAIA, AAIR, AAISM, AIMS, and others.