AI Governance

AI Governance Kit (City/County)

NIST AI RMF-aligned starter artifacts for policy, acceptable use, and oversight.

Executive Summary (1 page)

Responsible use: do not enter sensitive data into public AI tools; validate policy language with counsel and governance stakeholders as appropriate.

What this does

  • Creates clear rules for staff using AI tools
  • Reduces data exposure risk from prompts/uploads
  • Establishes human accountability + review for high-impact uses
  • Improves vendor/procurement guardrails

What leadership should care about

  • Public records/retention implications
  • Legal/compliance risk from incorrect AI output
  • Procurement terms (data use, logging, breach notice)

What’s included

Recommended 30–60 minute rollout

  1. Fill the Use Case Register for any AI already in use.
  2. Adopt the cheat sheet as an interim acceptable-use memo.
  3. Route the full policy through governance/legal and procurement.

Links (download/edit)

Hosted index: Public Sector Playbooks — Hosted Tools