Crisam Logo
  • Solutions
    Solutions
    • Risk & Resilience
    • Compliance, Controls & Security
    • Audit & Assurance
    • Reporting
    • AI Governed Autonomy
  • Industries
    Industries
    • Financial Services
    • Energy & Utilities
    • Healthcare & Pharmaceuticals
    • Industrial & Manufacturing
    • Public Sector & Infrastructure
    • Technology & Telecommunications
  • Platform
    Platform
    • Platform Capabilities
    • Oversight & Governance
    • Configurable workflows
    • Centralised GRC data model
    • Risk & control libraries
    • Evidence management
    • Action tracking
    • Automated reports
    • Board reporting
    • Roles & permissions
    • Audit trails
    • Multi-entity structures
  • Process
  • About CRISAM®
    About CRISAM®
    • What is CRISAM?
    • Customers
  • Resources & Events
    Resources & Events
    • Webinars
    • Events
Contact us
  • Language
  • Solutions
    • Risk & Resilience
    • Compliance, Controls & Security
    • Audit & Assurance
    • Reporting
    • AI Governed Autonomy
  • Industries
    • Financial Services
    • Energy & Utilities
    • Healthcare & Pharmaceuticals
    • Industrial & Manufacturing
    • Public Sector & Infrastructure
    • Technology & Telecommunications
  • Platform
    • Platform Capabilities
      • Configurable workflows
      • Centralised GRC data model
      • Risk & control libraries
      • Evidence management
      • Action tracking
    • Oversight & Governance
      • Automated reports
      • Board reporting
      • Roles & permissions
      • Audit trails
      • Multi-entity structures
  • Process
  • About CRISAM®
    • What is CRISAM?
    • Customers
  • Resources & Events
    • Webinars
    • Events
  • Contact us
Part of the CRISAM® AI Governed Autonomy framework. See the framework overview

CRISAM® AI Governed Autonomy: AI governance software for risk and AI leadersYour AI makes thousands of decisions today. You are accountable for every one.

You will never see most of them. CRISAM® shows you the few that matter: where a boundary weakens, what is at stake and who can act, before the harm scales.

Talk to usGet the whitepapers
CRISAM® Executive AI Governance CockpitExample values
CRISAM®Live
Board assurance position
96%Defensible
Purpose and inventory100
Accountability98
Risk and obligation96
Controls91
Live evidence89
Intervention100
Material AI systems
Decision systemVolume per dayControl stateHuman authority
Credit affordability184,320In boundsPause enabled
Complaints redress21,840BreachedDecision due
Fraud detection1,420,600At riskOverride active
Supplier triage6,750Control dueRoute to owner
Human intervention queue
Complaints redress AICustomer detriment threshold exceededOwner S. Hughes
CRITICAL
Fraud detection modelFalse positives outside appetiteOwner R. Khan
HIGH
Supplier triage agentThird party control overdueOwner A. Moore
MEDIUM
Board defensible evidence
  • Purpose approved
  • Accountable human named
  • Obligations mapped
  • Evidence captured at source
  • Intervention rights tested
AI decisions governed today1,836,41299.7% in bounds
Open threshold breaches31 needs decision
Median human response8m 12sWithin 15m appetite

When one of them goes wrong

Your dashboard is green. Your customers are not.

Customers affected0Monday, 09:00
  1. A supplier updates the model behind your complaints AI.Your deployment succeeds. Processing gets faster. Nothing looks broken.
  2. 20,000 decisions a day. 2 per cent of them wrong.Vulnerable customers are misread and offered too little compensation.
  3. Every team sees something true.Technology sees a successful release. Risk sees the old version in the register. Customer service sees complaints rising, in another system. Nobody sees the whole decision.
  4. Then the regulator asks. Then your board asks you.Why was this decision allowed? Which controls applied? Who could have stopped it? You reconstruct the answer in spreadsheets and emails, while the AI keeps operating.

You do not lack governance. It is just not connected to the decision at the speed the decision is operating.

Illustrative story about a fictional company, based on the CRISAM® Machine Speed Governance keynote.

The shift

You do not need to slow AI down. You need to see it, bound it and stop it.

Aviation did not slow every aircraft to the speed of a committee. It built air traffic control. Your AI governance can work the same way: visible, bounded and interruptible.

The same Monday, with CRISAM®

Minutes, not months. And you make the call.

The model change is linked to the decision. The threshold is crossed. Within minutes you see what changed, what is at stake and how much time is left, with your authority to roll back.

CRISAM® Decision detail, Complaints redress AIExample values
CRISAM®Governed autonomy
Current assurance conclusionControl degraded, Human decision requiredSupplier model change moved customer detriment above appetite. Automated containment is active.
Connected GRC control plane
ObjectiveFair customer redress
DependenciesModel 4.8 and supplier API
ControlDetriment at or below 1.5%
Evidence438 decisions sampled
Continuous assurance loop
01Sense02Understand03Decide04Act05Evidence06Learn
Decision intelligence for the board
Do we authorise rollback and maintain constrained operation while affected cases are reviewed?Decision recorded with its evidence, S. Hughes
Before maximum intervention time8m 12sDecision required
Human authoritySarah Hughes may pausePurpose to accountability current
Without rollback23 minuntil appetite is exceeded

Built for your role

The questions you are asked, answered in one module

Risk managers, CROs and compliance officers

“I reduce risk.”

Which AI systems are actually in use, and who is responsible?
Every material AI decision is recorded with its purpose and a named owner.
Which risks are assessed, and do the controls exist?
Each decision is linked to its risks, obligations, controls and current evidence.
How do I document AI risk for the board?
Board reports trace every conclusion back to the evidence behind it.

Chief AI Officers, CDOs and heads of AI governance

“I scale AI safely.”

How do we move more AI into production without a committee for every change?
Boundaries are set once. Within them, lower risk change can proceed faster.
What happens when a model, data source or supplier changes?
The change is linked to the decisions it affects, with their risks and controls.
Who can pause, override or stop a system?
Human authority is explicit for every material system, and it is tested.

Functions

Everything AI Governed Autonomy needs, already built in

Configure the module to your framework instead of developing it. Your existing AI, data and ticketing systems stay in place.

Build without code

Dynamic Forms

Capture each material AI decision with exactly the fields your framework needs.

Dynamic Power Lists

Filter, sort and edit all material AI decisions in one list.

Dynamic Wizards

Guide owners step by step through classification and assessment.

Dynamic Data Model

Extend objects and relations, such as models, suppliers and decisions, without development.

Forms Designer

Adapt input forms yourself, without waiting for a release.

Survey Designer

Collect information from AI owners and departments in structured surveys.

See, decide, report

AI Assistance

Supports assessments and descriptions with suggestions that you review and approve.

Dashboard Designer

Build cockpits for the board, risk and AI governance from the same data.

Report Designer

Board reports and evidence packs, adjustable without development.

Risk Flow

Follows risk along its dependencies, from model and supplier to decision and outcome.

Connect and run

Workflow Engine

Escalations, approvals and reminders run in the system, not in email threads.

REST API Integrations

Bring signals from model monitoring, data platforms and ticketing into CRISAM®.

Power Automate Connector

Connect Microsoft 365 workflows to CRISAM® without coding.

OSCAL

Exchange control catalogues and evidence in the open OSCAL format.

Flexible Deployment and Licence Options

Run CRISAM® in the cloud or on premises, licensed to fit your organisation.

Regulations

One record, several obligations

An AI system rarely falls under one regulation. Purpose, boundaries, intervention and accountability are set once and linked to every obligation that points at them. One control covers several obligations; one piece of evidence serves several reviewers.

EU AI ActDORA, Article 5NIS2, Article 20GDPRUK Corporate Governance Code, Provision 29

Walk into the boardroom ready

When your board asks, you show them

  • Why a material AI-enabled decision was permitted
  • Which risks, obligations and controls applied
  • That the supporting evidence is current and traceable
  • Who has tested authority to pause or stop
  • All of it, without a manual reconciliation exercise

The dashboard is not there to prove that nothing will go wrong. It is there to prove that you can see material change, understand the consequence, put the decision before an authorised human and respond before the harm scales.Human authority, not human approval

Questions

AI Governed Autonomy: common questions

What is AI Governed Autonomy?

CRISAM® AI Governed Autonomy keeps AI-enabled decisions under human control when they run faster than any person can follow. People set purpose, permission, boundaries, intervention and accountability. AI operates within those boundaries, and evidence shows continuously that it still does.

Does every AI decision need human approval?

No. A person approving every transaction creates delay, not control. If that person cannot understand the consequence, has no time to intervene or cannot safely disagree, the approval is theatre. The human must govern the system, not every output.

Do we have to replace our GRC platform, register or monitoring?

No. AI models, MLOps, cyber and data platforms remain necessary. CRISAM® is the connected GRC control plane above them and gives their signals meaning in governance terms.

Which functions does CRISAM® AI Governed Autonomy include?

Dynamic forms, power lists, wizards and data model, forms, survey, report and dashboard designers, AI assistance, risk flow, a workflow engine, OSCAL, REST API integrations, a Power Automate connector and flexible deployment and licence options.

Which regulations does the module cover?

The EU AI Act, DORA, NIS2, the GDPR and, in the UK, Provision 29 of the Corporate Governance Code. Each obligation is attached to existing records instead of starting a new project.

How do we get started?

With a conversation with Andrew McIntyre about the AI-enabled decisions that would concern your board if they produced the wrong outcome at scale.

Whitepaper series

Three board level thought papers on AI Governed Autonomy

The Machine Speed Governance series asks how a board stays in control when AI decides faster than any person can follow, and answers it in three steps.

Cover of Paper One in the CRISAM® AI Governed Autonomy whitepaper series: The Control Question Facing Every Board
Paper OneThe Control Question Facing Every Board
Cover of Paper Two in the CRISAM® AI Governed Autonomy whitepaper series: Governed Autonomy: The Control System for the Machine Speed Enterprise
Paper TwoGoverned Autonomy
Cover of Paper Three in the CRISAM® AI Governed Autonomy whitepaper series: Continuous Assurance for the Machine Speed Enterprise
Paper ThreeContinuous Assurance for the Machine Speed Enterprise
  • 01Why oversight falls behind adoption, and the board control test
  • 02Five non-delegable decisions and the GRC control plane
  • 03The half life of assurance and a ninety day route to continuous assurance

Get all three papers

Fill in the form. All three PDFs open straight away, and we send the links to your inbox.

This field is for validation purposes and should be left unchanged.
Privacy(Required)
Newsletter

Conversation

Bring one AI decision. We will trace it with you.

Thirty minutes with Andrew McIntyre: which AI-enabled decisions would concern your board if they went wrong at scale, and how you can govern them at machine speed.

Book a conversationGet the whitepapers
Andrew McIntyre
Andrew McIntyreDirector of UK, Nordics & Benelux
  • andrew.mcintyre@crisam.net
  • +44 20 4634 5000
Gemeinsame Nutzung CRISAM

CRISAM GRC Limited

20 Red Lion Street

London

+44 20 4634 5000 sales@crisam.uk

CALPANA business consulting GmbH

Blumauerstrasse 45-47

4020 Linz

+43 732 601 216-0 office@crisam.net

CRISAM GRC Limited

20 Red Lion Street

London

+44 20 4634 5000 sales@crisam.uk

CALPANA business consulting GmbH

Blumauerstrasse 45-47

4020 Linz

+43 732 601 216-0 office@crisam.net
Solutions
  • Risk & Resilience
  • Compliance, Controls & Security
  • Audit & Assurance
  • Reporting
Industries
  • Financial Services
  • Energy & Utilities
  • Healthcare & Pharmaceuticals
  • Industrial & Manufacturing
  • Industrial & Manufacturing
  • Technology & Telecommunications
Company
  • About CRISAM®
Legal
  • Data Policy
  • Imprint

© 2026 CRISAM GRC Limited

linkedin
#RISK Meet CRISAM® at #RISK Expo Europe, ExCeL London, 10 to 11 November, Stand 13. Learn more