The Development of a Generative Artificial Intelligence (AI) Governance Framework

SYNOPSIS Generative artificial intelligence (GenAI) is rapidly disrupting the business world. Although it is increasingly used, there are significant risks to this technology, and practitioners want help in managing GenAI risks. We use design science research methodology to develop and validate a GenAI governance framework designed to help companies manage the risks associated with GenAI. The framework outlines 69 control considerations across five governance domains and provides a maturity model to assess readiness for each control consideration. To develop and validate the framework, we conducted surveys, in-depth discussions, and structured interviews with more than 1,000 practitioners, including GenAI specialists, audit committee members, C-suite executives, internal and external auditors, and regulators. We also report on the experience of 18 diverse organizations that have used the framework since its release. Our evidence suggests that the GenAI governance framework is valuable to organizations of diverse sizes in helping them effectively manage GenAI risks.