Adding frameworks

Overview

VerifyWise comes with 25 compliance frameworks: EU AI Act, ISO 42001, ISO 27001 and NIST AI RMF, plus 21 more bundled frameworks covering privacy, security, sector rules and AI ethics. Every framework is available to every organization. There is nothing to enable or install; you add the ones you need.

Each framework is one of two types, and the type decides where you add it:

• Organization-level: Applies to the organization as a whole. You add it on the Frameworks page.
• Use case-level: Applies to one AI system. You add it to a use case from its Frameworks/regulations tab.

Organization-level frameworks

Use case-level frameworks

Adding a framework to your organization

1. Click Frameworks in the sidebar.
2. Click Manage frameworks and choose Add/remove frameworks.
3. In the AI Frameworks dialog, click Add on each framework you want. Added frameworks show an Added badge.
4. Click Done.

The dialog only lists organization-level frameworks. Your frameworks then appear on the Requirements and Controls tab; use the switcher at the top of the tab to move between them. The page also has Dashboard, Framework risks, Linked models and Settings tabs.

Adding a framework to a use case

1. Click Use cases in the sidebar and open the use case.
2. Open the Frameworks/regulations tab.
3. Click Manage frameworks/regulations. If the use case has no frameworks yet ("No frameworks installed"), click Add Framework instead.
4. In the AI Frameworks dialog, click Add on each framework you want, then click Done.

The dialog only lists use case-level frameworks. You can also pick frameworks when you create a use case, in the Applicable regulations (optional) field.

Rules to know

• No duplicates: A framework can only be added once to the same organization or use case.
• Type must match: Organization-level frameworks go on the Frameworks page, use case-level frameworks go on use cases. You can't mix them.
• Pending approval: While a use case has a pending approval request, you can't add or remove its frameworks. VerifyWise shows "This use case has a pending approval request…" until the approval process is complete.
• Starting point: Adding a framework creates all of its requirements with the status "Not started".

Removing a framework

Open the same AI Frameworks dialog and click Remove on the framework. Confirm in the Confirm framework removal dialog by clicking Remove.

Working on a requirement

In any of the 21 bundled frameworks, click a requirement to open its drawer. The drawer has four tabs:

• Details: Read what the requirement asks for, and set the Status, Owner, Reviewer, Approver and Due date.
• Evidence: Add proof with Upload new files, or reuse files already in VerifyWise with Attach existing files.
• Cross mappings: Link the risks this requirement addresses with Add/remove risks.
• Notes: Leave notes for your team.

Click Save to keep your changes. The available statuses are Not started, Draft, In progress, Awaiting review, Awaiting approval, Implemented, Audited and Needs rework.

Reports

Who can do what

Frameworks that aren't listed