AI intake checklist

Use case restated: purpose, affected people, decisions, human review XW-021
Data used, personal data, and data provenance recorded XW-028
Prohibited practices ruled out, or escalated to legal XW-021
Risk tier assigned with reasoning XW-021
Required controls listed for the tier XW-024
Supplier and model provider identified and assessed XW-023
Record added to the AI inventory XW-022
Risk entered in the risk register with an owner XW-024
Approval decision and approver recorded XW-020
Re-review date set, and triggered on any change of use XW-021