Use: produce periodically (at least annually, and on material change) for interested parties — customers, candidates, and regulators where applicable. Owner: CTO (AIMS Owner) + General Counsel. Publish or share per the audience; public elements go to the AI Training-Data Transparency Notice / Trust Center. Frameworks: ISO/IEC 42001 A.8.3 / A.8.5 (information for interested parties).
Replace every {{var}}. Tailor the depth to the audience: public summary vs. customer-detailed vs. regulator-facing.
1. Scope & period
- Reporting period: {{reporting_period}}
- Systems covered: {{systems_covered}}
- Audience: {{audience}}
2. Governance & accountability
- AIMS owner & oversight: CTO (AIMS Owner); AI risk review group; ISMS Management Review.
- Frameworks & obligations: {{frameworks_obligations}} — see the Legal & Regulatory Register.
3. Trustworthiness measures
- Transparency: AI-interaction and AI-content disclosures in place (EU AI Act Art. 50).
- Fairness: bias-audit approach and latest results summary (link the public bias-audit summary where applicable).
- Privacy: deidentification of training data; no third-party training on customer data; re-identification audit posture.
- Human oversight: human-in-the-loop for consequential decisions; subject redress / ADMT opt-out.
- Security & robustness: evaluation and monitoring summary.
4. Performance summary
| System | Key metric(s) | Result this period | Trend |
|---|---|---|---|
| {{perf_system}} | {{perf_metric}} | {{perf_result}} | {{perf_trend}} |
5. Incidents & changes
- AI incidents / adverse-impact events: {{incidents}} (see AI Serious-Incident Reporting)
- Material changes / new features: {{material_changes}}
6. Forward look
- Planned improvements / objectives: {{planned_improvements}} (ties to the ISMS Management-System Register objectives)
Variables
| Variable | Description |
|---|---|
{{reporting_period}} | Reporting period covered |
{{systems_covered}} | Features / models covered (from the AI Model Registry) |
{{audience}} | Audience (public / customers / regulator) |
{{frameworks_obligations}} | Frameworks and obligations (EU AI Act tier, state AI laws, ISO 42001 status) |
{{perf_system}} | System / feature in the performance row |
{{perf_metric}} | Key metric(s) (accuracy / fairness / availability) |
{{perf_result}} | Result this period |
{{perf_trend}} | Trend (↑/→/↓) |
{{incidents}} | AI incidents / adverse-impact events (count; summary; remediation) |
{{material_changes}} | Material changes / new features |
{{planned_improvements}} | Planned improvements / objectives |