AI−RI+C connects the identification and assessment of AI-related risks with mitigation measures and compliance planning, grounded in your organisation’s activities and priorities.
Explore the approachBegin with how AI is actually used. Establish the risk landscape. Turn findings into practical governance decisions.
Four connected steps provide a practical structure for understanding AI-related exposure and developing a proportionate governance response.
Establish where and how AI is developed, procured or used. Examine the purpose of each use case, the people affected, the suppliers involved and the responsibilities that may arise.
Document findings, existing controls and governance gaps. Record the basis for assessments and decisions, distinguish confirmed facts from open questions, and identify where further evidence is needed.
Develop measures to address the identified risks. Depending on the use case, these may include governance controls, human oversight arrangements, supplier safeguards, contractual provisions and changes to internal processes.
Translate relevant requirements into policies, responsibilities and working procedures. Connect implementation with training, monitoring and review so that governance can evolve as AI use and organisational priorities change.
A structured view of relevant AI systems, use cases and supplier relationships.
Documented roles and ownership for governance activities and follow-up actions.
An explicit record of identified risks, existing controls and unresolved questions.
A practical sequence of measures aligned with the organisation’s exposure and resources.
Policies, assessment records and procedures developed for the agreed engagement.
A defined path for implementation, monitoring and subsequent review.
Outputs are illustrative. The scope, deliverables and responsibilities of each engagement are agreed in advance.
The starting point may be a specific AI procurement, an existing portfolio of tools, a new system under development or a broader governance programme. The engagement is shaped around that starting point.
AI−RI+C is GLIE Legal’s advisory approach, not a certification scheme or a guarantee of compliance. It provides a structure for connecting legal analysis, risk assessment and practical governance work.
Explore the services that support each stage, or contact GLIE Legal about a defined advisory, implementation or training engagement.