How to write an AI governance decision record
A decision record should let a later reviewer understand what was known, what remained uncertain and who accepted the conditions.
State the decision precisely
Name the system, version, use, users, affected people and the exact approval, restriction or stop decision.
Separate evidence from judgement
List confirmed evidence, conflicting evidence, uncertainty and the reasons for the judgement. Do not present assumptions as supplier facts.
Set conditions and review triggers
Record controls, monitoring, incident triggers, supplier changes, expiry, review owner and approval time.
Material reviewed for this guide
- Artificial Intelligence Risk Management Framework 1.0National Institute of Standards and Technology
- AI Risk Management Framework PlaybookNational Institute of Standards and Technology
This guide is general operational information, not legal advice. Check the official material and obtain appropriate advice for circumstances outside the stated scope.