OROfficial references

TA-14 AI GOVERNANCE LIBRARY

Official References

Access the authoritative publications, laws, regulations, standards, frameworks, and institutional materials connected to governance library records.

23Official references

17Issuing publishers

5Record types

23References displayed

0Active filters

ARAuthoritative record

SOURCE PROVENANCE

An official reference connects a library record to the publication issued by the originating authority.

Official-source access supports provenance, verification, and independent review. It does not by itself prove that the referenced material applies to a specific entity, system, jurisdiction, lifecycle stage, role, or proposed execution.

REFERENCE CONTROL DESK

Search the authoritative materials behind the governance library.

Filter official references by title, publisher, publication type, source address, or record summary.

23References shown

23Total official sources

0Filters applied

Official source

lawParliament of Canada

Artificial Intelligence and Data Act

A proposed Canadian legislative framework intended to regulate high-impact artificial intelligence systems.

Issuing authorityParliament of Canada

Official reference addresshttps://www.parl.ca/legisinfo/en/bill/44-1/c-27

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

guidanceNational Institute of Standards and Technology

Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile

A companion profile to the NIST AI RMF addressing risks and actions specific to generative artificial intelligence.

Issuing authorityNational Institute of Standards and Technology

Official reference addresshttps://doi.org/10.6028/NIST.AI.600-1

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

guidanceWhite House Office of Science and Technology Policy

Blueprint for an AI Bill of Rights

A nonbinding framework describing protections for people affected by automated systems.

Issuing authorityWhite House Office of Science and Technology Policy

Official reference addresshttps://www.whitehouse.gov/ostp/ai-bill-of-rights/

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

lawColorado General Assembly

Colorado Artificial Intelligence Act

A state law governing developers and deployers of high-risk artificial intelligence systems used in consequential decisions.

Issuing authorityColorado General Assembly

Official reference addresshttps://leg.colorado.gov/bills/sb24-205

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

frameworkCommittee of Sponsoring Organizations of the Treadway Commission

COSO Enterprise Risk Management Framework

An enterprise risk management framework integrating risk with strategy and organizational performance.

Issuing authorityCommittee of Sponsoring Organizations of the Treadway Commission

Official reference addresshttps://www.coso.org/erm-framework

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

lawEuropean Union

European Union Artificial Intelligence Act

A risk-based legal framework governing the development, placement on the market, deployment, and use of artificial intelligence systems in the European Union.

Issuing authorityEuropean Union

Official reference addresshttps://eur-lex.europa.eu/eli/reg/2024/1689/oj

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

guidanceFederal Trade Commission

Federal Trade Commission Artificial Intelligence Guidance

A body of consumer-protection guidance and enforcement messaging addressing deceptive, unfair, discriminatory, and unsupported AI practices.

Issuing authorityFederal Trade Commission

Official reference addresshttps://www.ftc.gov/business-guidance/blog/2023/02/keep-your-ai-claims-check

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

lawEuropean Union

General Data Protection Regulation and Automated Decision-Making

European data-protection requirements governing personal data processing, profiling, transparency, and certain solely automated decisions.

Issuing authorityEuropean Union

Official reference addresshttps://eur-lex.europa.eu/eli/reg/2016/679/oj

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

standardIEEE Standards Association

IEEE 7000 Model Process for Addressing Ethical Concerns During System Design

A standard process for identifying and addressing ethical values and concerns during system and software design.

Issuing authorityIEEE Standards Association

Official reference addresshttps://standards.ieee.org/ieee/7000/6781/

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

standardInternational Organization for Standardization

ISO 31000 Risk Management Guidelines

General principles, framework, and process guidance for managing risk across organizations.

Issuing authorityInternational Organization for Standardization

Official reference addresshttps://www.iso.org/iso-31000-risk-management.html

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

standardISO and IEC

ISO/IEC 22989 Artificial Intelligence Concepts and Terminology

An international standard establishing concepts and terminology used across artificial intelligence systems and related standards.

Issuing authorityISO and IEC

Official reference addresshttps://www.iso.org/standard/74296.html

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

standardISO and IEC

ISO/IEC 23053 Framework for Artificial Intelligence Systems Using Machine Learning

A framework describing machine-learning-based AI systems and their components, functions, and relationships.

Issuing authorityISO and IEC

Official reference addresshttps://www.iso.org/standard/74438.html

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

standardISO and IEC

ISO/IEC 23894 Artificial Intelligence Risk Management

International guidance for organizations seeking to identify, assess, treat, monitor, and communicate risks related to artificial intelligence.

Issuing authorityISO and IEC

Official reference addresshttps://www.iso.org/standard/77304.html

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

standardISO and IEC

ISO/IEC 38507 Governance Implications of the Use of Artificial Intelligence by Organizations

Guidance for governing bodies on the organizational implications of using artificial intelligence.

Issuing authorityISO and IEC

Official reference addresshttps://www.iso.org/standard/56641.html

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

standardISO and IEC

ISO/IEC 42001 Artificial Intelligence Management System

An international management system standard specifying requirements for establishing, implementing, maintaining, and continually improving an AI management system.

Issuing authorityISO and IEC

Official reference addresshttps://www.iso.org/standard/81230.html

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

frameworkMITRE

MITRE ATLAS

A knowledge base of adversary tactics and techniques targeting machine-learning and AI systems.

Issuing authorityMITRE

Official reference addresshttps://atlas.mitre.org/

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

lawNew York City

New York City Local Law 144 on Automated Employment Decision Tools

A local law regulating certain automated employment decision tools used in hiring and promotion decisions.

Issuing authorityNew York City

Official reference addresshttps://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

frameworkNational Institute of Standards and Technology

NIST Artificial Intelligence Risk Management Framework

A voluntary framework for managing risks associated with artificial intelligence across organizational and system lifecycles.

Issuing authorityNational Institute of Standards and Technology

Official reference addresshttps://www.nist.gov/itl/ai-risk-management-framework

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

principleOrganisation for Economic Co-operation and Development

OECD Principles on Artificial Intelligence

International principles promoting innovative and trustworthy artificial intelligence that respects human rights and democratic values.

Issuing authorityOrganisation for Economic Co-operation and Development

Official reference addresshttps://oecd.ai/en/ai-principles

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

guidanceOffice of Management and Budget

OMB Memorandum M-24-10: Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence

Federal agency guidance establishing governance, innovation, inventory, and risk-management expectations for agency use of artificial intelligence.

Issuing authorityOffice of Management and Budget

Official reference addresshttps://www.whitehouse.gov/wp-content/uploads/2024/03/M-24-10-Advancing-Governance-Innovation-and-Risk-Management-for-Agency-Use-of-Artificial-Intelligence.pdf

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

guidanceOWASP Foundation

OWASP Top 10 for Large Language Model Applications

A community-developed list of significant security risks affecting applications built with large language models.

Issuing authorityOWASP Foundation

Official reference addresshttps://genai.owasp.org/llm-top-10/

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

principleUNESCO

UNESCO Recommendation on the Ethics of Artificial Intelligence

A global normative instrument addressing the ethical development and use of artificial intelligence.

Issuing authorityUNESCO

Official reference addresshttps://www.unesco.org/en/artificial-intelligence/recommendation-ethics

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

Official source

principleUnited Nations

United Nations Guiding Principles on Business and Human Rights

A global framework defining state duties and corporate responsibilities regarding business-related human-rights impacts.

Issuing authorityUnited Nations

Official reference addresshttps://www.ohchr.org/sites/default/files/documents/publications/guidingprinciplesbusinesshr_en.pdf

Reference function

Supports source verification, provenance review, and direct access to the originating publication.

View Library Record Open Official Source →

REFERENCE REVIEW MODEL

Official material should remain connected to provenance, applicability, interpretation, evidence, and execution.

01Identify the issuer

Confirm the institution, regulator, legislature, standards body, or technical authority responsible for the publication.

02Confirm the publication

Verify the official title, source location, publication type, and authoritative version of the referenced material.

03Determine applicability

Establish whether the material governs the relevant jurisdiction, organization, system, role, sector, or use case.

04Interpret the requirement

Identify the obligation, expectation, control, principle, prohibition, or evidence requirement created by the source.

05Bind required evidence

Define what must be demonstrated before the proposed activity can be accepted, reviewed, or permitted to proceed.

06Preserve the outcome

Record how the source was applied, what decision followed, and whether the governed result satisfied the required condition.

OFFICIAL SOURCE CLASSES

Different publication classes carry different forms of authority.

The source class helps explain how the material should be interpreted, but the actual effect depends on mandate, jurisdiction, adoption, contractual use, and operating context.

LAWLegislatively enacted legal authority

Establishes rights, duties, prohibitions, powers, or enforcement structures within a defined jurisdiction.

REGULATIONBinding regulatory requirements

Converts statutory authority into enforceable obligations, procedural requirements, and supervisory expectations.

STANDARDConsensus technical or management criteria

Defines repeatable requirements, controls, processes, measurements, or conformity-assessment structures.

FRAMEWORKStructured governance methodology

Organizes functions, outcomes, practices, and implementation pathways for managing AI systems and associated risks.

GUIDANCEInterpretive or implementation direction

Explains expected practices, recommended controls, implementation methods, or supervisory interpretation.

PRINCIPLEHigh-level governance expectation

Establishes values, objectives, or public-interest commitments that may later be translated into more specific requirements.

SRSource record

REFERENCE-TO-EXECUTION BOUNDARY

An official source proves where the governing material came from. Admissibility requires proof that it governs the proposed action.

Source authority, applicability, requirement interpretation, evidence validation, and execution control must remain distinct. A valid publication can still be irrelevant to a particular decision, entity, system, or operational condition.

OFFICIAL SOURCE→PROVENANCE→AUTHORITY→APPLICABILITY→REQUIREMENT→EVIDENCE→EXECUTION

Sources Authorities Applicability Browse All Records →