Capstone Five: Govern and Manage

In practice

The utility's risk office asks how the payment-risk model is governed. Priya answers from the documents she already has. For Govern one point six, the inventory of AI systems, she points to the AI row of the Disconnection's matrix, which lists the model with what it reads and writes. For Govern three point two, defined roles for people and AI, she points to the gate record: the model orders a call list, and an officer decides. For Manage one point one, whether to proceed, she shows the written purpose and what the model is not for. For Manage one point two and one point three, the response to the main risk, unfair ordering of protected households, is mitigation: the protected-status check and the new tests. A remaining risk, an officer under pressure skimming the call list, is written down under Manage one point four. For Manage two point four, the collections manager owns the switch back to the old call order. For Manage four point one, appeals and the override log feed the six-monthly review. The risk office asks one more question: was a simpler option considered, under Manage two point one? Priya adds a note: a rule-based call order was the alternative, kept as the fallback.