LeanIX usage for EU AI Act

We implemented the following:

Governance Factsheet to track compliance / assessments | Community

Let me know if you need more info.

​@Jacques : Thank you for sharing, a good approach. We started using such kind of factsheet for Governance & Architecture, too.

But for AI we want to stay in line with the proposed implementation and you need to document which Application / Software etc. uses AI.

Hello Cartsen,

For us the AI Risk assessment sits in OneTrust. We identify in LeanIX which assets are using AI but the assessment is made in OneTrust through the assessment functionality.

However, a way that i see to do it LeanIX would be to have adequate attributes to assess the AI risk (Autonomy Level, Human Interaction with the AI...) and use the new calculation feature of LeanIX. This calculation feature could take the score of this attribute and assign a risk based on a logic that you should determine.

Kind regards,

Simon

Hi Simon,

We dont have ‘OneTrust’ for assessment and we were wondering to extend Lean IX with assessments either through attributes or through integration to some Microsoft forms which in turn returns some value to ‘AI Risk’ Field.

While we were looking through assessment questions from legal, it looked like 60-70 questions. We haven't reached to the details which can sort out what are the core fields which can derive risk score.

Have you done that exercise already? If so, can you provide that information (like you mentioned Autonomy level etc)

Thanks,

Surbhi