AI Governance Skills Framework

This resource outlines the core knowledge areas, responsibilities, and competencies needed to govern AI effectively across executive, operational, technical, legal, risk, and business functions.

Contributors:
Ashley Casovan
Managing Director, AI Governance Center
IAPP
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Executive Functions
This section outlines strategic leadership executive functions as they relate to the AI governance skills framework.
Position title: Chief Executive Officer (CEO)
Knowledge
- Strategic leadership including investment decisions to define how the company is adopting and governing AI in alignment with the company’s values, mission and long-term goals.
- Public face of AI adoption.
Accountability
- Strategic alignment to ensure AI supports the organizations’ mission, values and business goals.
- Setting tone for use of AI.
- Prioritizing responsible use.
Position title: Chief Operating Officer (COO)
Knowledge
- Ensuring AI governance is embedded into AI processes across the organization.
- Cross-functional coordination.
Accountability
- Policy execution and enforcement including monitoring and controls.
TEXT
TEXT
AI Governance Professional Profiles
Profiles within policy centers on ensuring organization's AI governance efforts remain aligned with the evolving external AI regulatory landscape. This includes designing, developing and implementing AI policies, guidance and standards that integrate legislative requirements with industry best practices, conducting horizon-scanning and directly advocating with regulators, standards bodies and industry groups. A junior and senior role have been identified for this category because senior professionals are more focused on understanding the external policy landscape, providing strategic policy guidance to the organization and developing and managing relationships with external stakeholders. Roles reporting to senior policy function primarily focus on internal collaborations and coordination within the organization and the policy team to draft appropriate policy initiatives that suits the organization's needs.
Position title: AI Policy Lead
Alternative titles
- Tech Policy Lead
- Digital Policy Lead
- Regulatory Compliance Lead
- AI Policy Lead
- AI Policy Specialist
Summary statement
Responsible for shaping and developing internal AI-related policies based on interpretation of external AI-related regulations.
Mission / key purpose
Ensures organizational alignment with evolving AI policy landscapes.
Deliverables / primary functions (sub functions)
- Develops policy briefs for key and evolving issues related to the state of AI and its impact on the organization.
- Develops compliance reports for AI-related regulations, standards and industry best practices.
- Oversees the development and delivery of AI impact assessments for AI systems used by the organization.
- Provides advice to internal teams on appropriate use and development of AI aligned with policies, regulations, standards and best practices.
Main tasks
- Designs, develops and implements AI policies, guidance and standards for organizational use across the AI lifecycle integrating legislative requirements and evolving industry best practices aligned with organizational principles and goals.
- Informs and communicates with internal stakeholders about relevant policies, regulations, standards and emerging best practices.
- Works with relevant external stakeholders to understand AI use and impact in society. This could include, but not be limited to research institutes, international organizations and civil society organizations.
- Works to inform business leaders, government officials, regulators and standards setters of knowledge or best practices developed while designing, developing or using AI within the organization.
- AI use-case analysis to assess systems against policy, regulatory and ethical requirements.
- Performs regulatory monitoring and horizon scanning for emerging AI policy developments.
- Provides policy analysis and interpretation of AI-related laws, regulations, standards and best practices.
Key skills
- Ability to understand and interpret AI laws, policies, standards and best practices.
- Strong communication skills to work effectively with internal and external stakeholders to share policy requirements with technical, legal and business audiences.
- Ability to collaborate within governance, legal, risk, product and technical teams.
- Ability to provide external advocacy and engagement with regulators, standards bodies and industry groups.
- Demonstrate professional judgment and ethical sensitivity for ambiguous or evolving AI policy contexts.
- Understanding of how to develop policies to maximize use of AI for organizational benefit.
- Ability to appropriately engage and advocate for AI policy team objectives with executive leaders.
- Ability to navigate and develop expertise in relevant laws, policies, frameworks, standards and industry best practices related to organization’s design, development and deployment of AI.
Key knowledge
- Strong awareness and knowledge of AI governance laws, policies, standards and best practices.
- Deep understanding of organizational AI lifecycles and governance structures.
- Full comprehension of engagement and advocacy processes to effectively advocate for AI policy objectives.
- Knowledge of how to develop and implement AI impact assessments.
- Knowledge of key associate with AI development and use.
Position title: AI Policy Analyst
Alternative titles
- Associate AI Policy Analyst
- Junior AI Policy Specialist
- Responsible AI Analyst (Junior)
- Technology Policy Analyst/ Associate
- Digital Policy Analyst
- AI Regulatory Analyst
- AI Regulatory Affairs Analyst
- AI Public Policy Analyst
- Responsible AI Policy Analyst
Summary statement
Supports the analysis, development and communication of AI related policies, regulations, standards and best practices under the direction of senior policy or governance leaders.
Mission / key purpose
Supports organizational alignment with evolving AI policy and regulatory requirements through research, analysis and documentation.
Deliverables / primary functions (sub functions)
- Develops AI related policy research summaries and briefing notes.
- Manages AI related regulatory tracking updates and horizon-scanning.
- Supports the drafting of AI policies, guidance and internal FAQs.
Main tasks
- Supports drafting and updating AI policies, guidance and standards for the organization.
- Helps monitor relevant internal and external AI policies, regulations and standards.
- Conducts research on emerging AI regulatory and policy developments.
- Prepares summaries and materials to support internal and external stakeholder communications related to organization’s AI policy efforts.
- Escalates identified policies, compliance or ethical issues to senior team members
Key skills
- Ability to provide policy analysis and interpretation for AI related laws, regulations, standards and best practices.
- Ability to perform regulatory monitoring and horizon scanning with support from AI Policy Lead.
- Ability to write and communicate clearly for internal and external stakeholders.
- Ability to collaborate and coordinate across business and technical teams within the organization.
- Demonstrate ethical awareness and professional judgment, with ability to escalate identified risks where appropriate
Key knowledge
- Working knowledge of how AI is used within the organization.
- Introductory knowledge of AI governance laws, policies, frameworks and standards
- Understanding of organizational AI lifecycles and governance structures
- Awareness of engagement and advocacy processes related to AI policy
This section outlines governance-related profiles as they relate to the AI governance skills framework.
TEXT
TEXT
TEXT
TEXT
TEXT
TEXT
Position title: AI Policy Lead
Alternative titles
- Tech Policy Lead
- Digital Policy Lead
- Regulatory Compliance Lead
- AI Policy Lead
- AI Policy Specialist
Summary statement
Responsible for shaping and developing internal AI-related policies based on interpretation of external AI-related regulations.
Mission / key purpose
Ensures organizational alignment with evolving AI policy landscapes.
Deliverables / primary functions (sub functions)
- Develops policy briefs for key and evolving issues related to the state of AI and its impact on the organization.
- Develops compliance reports for AI-related regulations, standards and industry best practices.
- Oversees the development and delivery of AI impact assessments for AI systems used by the organization.
- Provides advice to internal teams on appropriate use and development of AI aligned with policies, regulations, standards and best practices.
Main tasks
- Designs, develops and implements AI policies, guidance and standards for organizational use across the AI lifecycle integrating legislative requirements and evolving industry best practices aligned with organizational principles and goals.
- Informs and communicates with internal stakeholders about relevant policies, regulations, standards and emerging best practices.
- Works with relevant external stakeholders to understand AI use and impact in society. This could include, but not be limited to research institutes, international organizations and civil society organizations.
- Works to inform business leaders, government officials, regulators and standards setters of knowledge or best practices developed while designing, developing or using AI within the organization.
- AI use-case analysis to assess systems against policy, regulatory and ethical requirements.
- Performs regulatory monitoring and horizon scanning for emerging AI policy developments.
- Provides policy analysis and interpretation of AI-related laws, regulations, standards and best practices.
Key skills
- Ability to understand and interpret AI laws, policies, standards and best practices.
- Strong communication skills to work effectively with internal and external stakeholders to share policy requirements with technical, legal and business audiences.
- Ability to collaborate within governance, legal, risk, product and technical teams.
- Ability to provide external advocacy and engagement with regulators, standards bodies and industry groups.
- Demonstrate professional judgment and ethical sensitivity for ambiguous or evolving AI policy contexts.
- Understanding of how to develop policies to maximize use of AI for organizational benefit.
- Ability to appropriately engage and advocate for AI policy team objectives with executive leaders.
- Ability to navigate and develop expertise in relevant laws, policies, frameworks, standards and industry best practices related to organization’s design, development and deployment of AI.
Key knowledge
- Strong awareness and knowledge of AI governance laws, policies, standards and best practices.
- Deep understanding of organizational AI lifecycles and governance structures.
- Full comprehension of engagement and advocacy processes to effectively advocate for AI policy objectives.
- Knowledge of how to develop and implement AI impact assessments.
- Knowledge of key associate with AI development and use.
Position title: AI Policy Analyst
Alternative titles
- Associate AI Policy Analyst
- Junior AI Policy Specialist
- Responsible AI Analyst (Junior)
- Technology Policy Analyst/ Associate
- Digital Policy Analyst
- AI Regulatory Analyst
- AI Regulatory Affairs Analyst
- AI Public Policy Analyst
- Responsible AI Policy Analyst
Summary statement
Supports the analysis, development and communication of AI related policies, regulations, standards and best practices under the direction of senior policy or governance leaders.
Mission / key purpose
Supports organizational alignment with evolving AI policy and regulatory requirements through research, analysis and documentation.
Deliverables / primary functions (sub functions)
- Develops AI related policy research summaries and briefing notes.
- Manages AI related regulatory tracking updates and horizon-scanning.
- Supports the drafting of AI policies, guidance and internal FAQs.
Main tasks
- Supports drafting and updating AI policies, guidance and standards for the organization.
- Helps monitor relevant internal and external AI policies, regulations and standards.
- Conducts research on emerging AI regulatory and policy developments.
- Prepares summaries and materials to support internal and external stakeholder communications related to organization’s AI policy efforts.
- Escalates identified policies, compliance or ethical issues to senior team members
Key skills
- Ability to provide policy analysis and interpretation for AI related laws, regulations, standards and best practices.
- Ability to perform regulatory monitoring and horizon scanning with support from AI Policy Lead.
- Ability to write and communicate clearly for internal and external stakeholders.
- Ability to collaborate and coordinate across business and technical teams within the organization.
- Demonstrate ethical awareness and professional judgment, with ability to escalate identified risks where appropriate
Key knowledge
- Working knowledge of how AI is used within the organization.
- Introductory knowledge of AI governance laws, policies, frameworks and standards
- Understanding of organizational AI lifecycles and governance structures
- Awareness of engagement and advocacy processes related to AI policy
Test test test

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Submit for CPEsContributors:
Ashley Casovan
Managing Director, AI Governance Center
IAPP