Ethical Governance Integration Model

Most organisations that use AI now have an AI policy, and many are preparing for ISO/IEC 42001 certification. Yet the question that matters most to the people affected — whether the systems shaping decisions about them treat them fairly — is one a certificate alone cannot answer. Policies exist without conviction, oversight bodies lack authority, affected communities have no voice, and review follows the audit calendar rather than the behaviour of live systems.

The Ethical Governance Integration Model (EGIM) closes that gap. Its five dimensions ask for an AI Ethics Charter with named red lines, adopted by the governing Board; controls in proportion to risk, where risk depends on who is affected as well as what a system does; an AI Ethics Board with the authority to stop a deployment; impact assessments, audit trails, incident management and redress that can change an outcome; and continuous review driven by how systems actually behave.

The EGIM complements ISO/IEC 42001 rather than replacing it. Every dimension maps to the standard’s clauses and Annex A objectives, and the guide also maps the model to the EU AI Act, the NIST AI RMF, ISO/IEC 42005 and UK and GCC requirements, so implementation runs alongside certification preparation instead of as a separate programme. It scales with the risk of the systems in use, not the size of the organisation.

Maturity is assessed against fifty criteria. Six keystones ask for evidence that governance actually changed something, so documentation alone cannot reach Level 4. The guide includes templates for the Charter, the Ethics Board’s terms of reference and the impact assessment, a worked maturity assessment and an 18-month implementation plan, and it comes with an assessment workbook and structured interview question sets.