AI Governance and Responsible AI Frameworks for Enterprise Software Systems
DOI:
https://doi.org/10.22399/ijcesen.5559Keywords:
AI Governance, Responsible AI, Enterprise Software, EU AI Act, NIST AI RMF, ISO/IEC 42001Abstract
This research study examines the area of AI governance and responsible AI frameworks in enterprise software solutions with regard to global trends in adoption, comparison of different frameworks, elements of governance, and organisational influence. The research methodology is secondary analysis based on academic literature, industry reports, regulations, and case studies. From the research findings, there is a difference in global adoption, which includes strict enforcement of the EU AI Act in Europe, voluntary adoption of the NIST AI Risk Management Framework in North America, and inconsistent adoption in the Asia Pacific region.
Comparative analysis reveals the distinctions regarding scope and enforceability in various frameworks, such as ISO/IEC 42001 and OECD AI Principles, whereas governance-related elements, like bias detection, explainability, audit trails, and human oversight, are seen as crucial control mechanisms. In addition, case examples of Air Canada’s responsibility regarding a chatbot and iTutorGroup’s hiring policy demonstrate the risks that arise when governance frameworks are not strong enough. Thus, the research concludes that integrated frameworks consisting of regulatory compliance, technical controls, and organisational accountability provide a higher level of compliance and reputation management.
References
1. ABBAS, A. A. H. S. (2024). Ethical and Responsible Artificial Intelligence in High-Risk Industries: A Results-Oriented Governance and Assurance Framework. International Journal For Multidisciplinary Research. https://www.academia.edu/download/125647281/61913.pdf
2. AI, N. (2024). Artificial intelligence risk management framework: Generative artificial intelligence profile. NIST Trustworthy and Responsible AI Gaithersburg, MD, USA. https://pathologyinnovationcc.org/s/R8b_1722118549750.pdf
3. Aiyankovil, K. G., Lewis, D., & Hernandez, J. (2024, September). Mapping data governance requirements between the European Union’s AI Act and ISO/IEC 5259: a semantic analysis. In NeXt-generation Data Governance workshop 2024. https://openreview.net/pdf?id=5ilvDyTkbg
4. Bogucka, E., Constantinides, M., Šćepanović, S., & Quercia, D. (2024, October). Co-designing an AI impact assessment report template with AI practitioners and AI compliance experts. In Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society (Vol. 7, No. 1, pp. 168-180). https://ojs.aaai.org/index.php/AIES/article/download/31627/33794 DOI: https://doi.org/10.1609/aies.v7i1.31627
5. Bonney, K., Breaux, C., Buffington, C., Dinlersoz, E., Foster, L. S., Goldschlag, N., ... & Savage, K. (2024). Tracking firm use of AI in real time: A snapshot from the Business Trends and Outlook Survey (No. w32319). National Bureau of Economic Research. https://www.nber.org/system/files/working_papers/w32319/w32319.pdf DOI: https://doi.org/10.3386/w32319
6. Bontempelli, A., Giunchiglia, F., Passerini, A., & Teso, S. (2022). Human-in-the-loop handling of knowledge drift: A. Bontempelli et al. Data Mining and Knowledge Discovery, 36(5), 1865-1884. https://link.springer.com/content/pdf/10.1007/s10618-022-00845-0.pdf DOI: https://doi.org/10.1007/s10618-022-00845-0
7. Cotteleer, M. J., Goldenberg, S. S., Wing, I., Alliyu, O., Kania, S., Mujumdar, V., & Sniderman, B. (2021, November). Cybersecurity Requirements for AM Systems: New Enforcement in DoD Environments, and Resources for Implementation. In Proceedings of the 2021 Workshop on Additive Manufacturing (3D Printing) Security (pp. 49-60). https://dl.acm.org/doi/pdf/10.1145/3462223.3485624 DOI: https://doi.org/10.1145/3462223.3485624
8. Ee, S., O'Brien, J., Williams, Z., El-Dakhakhni, A., Aird, M., & Lintz, A. (2024). Adapting cybersecurity frameworks to manage frontier AI risks: A defense-in-depth approach. arXiv preprint arXiv:2408.07933. https://arxiv.org/pdf/2408.07933
9. eeoc.gov, (2023). iTutorGroup to Pay $365,000 to Settle EEOC Discriminatory Hiring Suit. Retrieved from https://www.eeoc.gov/newsroom/itutorgroup-pay-365000-settle-eeoc-discriminatory-hiring-suit
10. Golpayegani, D., Pandit, H. J., & Lewis, D. (2022, December). Comparison and analysis of 3 key AI documents: EU’s proposed AI Act, assessment list for trustworthy AI (ALTAI), and ISO/IEC 42001 AI management system. In Irish Conference on Artificial Intelligence and Cognitive Science (pp. 189-200). Cham: Springer Nature Switzerland. https://link.springer.com/content/pdf/10.1007/978-3-031-26438-2_15.pdf DOI: https://doi.org/10.1007/978-3-031-26438-2_15
11. Haefner, N., Parida, V., Gassmann, O., & Wincent, J. (2023). Implementing and scaling artificial intelligence: A review, framework, and research agenda. Technological Forecasting and Social Change, 197, 122878. https://www.sciencedirect.com/science/article/pii/S0040162523005632 DOI: https://doi.org/10.1016/j.techfore.2023.122878
12. Kuo, C. L. (2022). Peer review for academic research. Archives of Otorhinolaryngology-Head & Neck Surgery (AOHNS). https://scitemed.com/article/4093/scitemed-aohns-2022-00155 DOI: https://doi.org/10.24983/scitemed.aohns.2022.00155
13. Laux, J., Wachter, S., & Mittelstadt, B. (2024). Trustworthy artificial intelligence and the European Union AI act: On the conflation of trustworthiness and acceptability of risk. Regulation & Governance, 18(1), 3-32. https://onlinelibrary.wiley.com/doi/pdfdirect/10.1111/rego.12512 DOI: https://doi.org/10.1111/rego.12512
14. Pehlivan, C. N. (2024). Report: The EU artificial intelligence (AI) act: An introduction. Global Privacy Law Review, 5(1). https://papers.ssrn.com/sol3/Delivery.cfm?abstractid=5368880 DOI: https://doi.org/10.54648/GPLR2024004
15. Roberts, A., Maennel, O., & Snetkov, N. (2021, September). Cybersecurity test range for autonomous vehicle shuttles. In 2021 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) (pp. 239-248). IEEE. https://www.researchgate.net/profile/Nikita-Snetkov/publication/355766269_Cybersecurity_Test_Range_for_Autonomous_Vehicle_Shuttles/links/6239bb8ebc48180e3431ff30/Cybersecurity-Test-Range-for-Autonomous-Vehicle-Shuttles.pdf DOI: https://doi.org/10.1109/EuroSPW54576.2021.00031
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 International Journal of Computational and Experimental Science and Engineering
This work is licensed under a Creative Commons Attribution 4.0 International License.
