Senior Management / Top Management is the governing-body role for the organisation’s use of AI. It does not run models, write pipelines or operate the workbench. It Directs. Management Establishes, Implements, Operates and Reviews. This role evaluates options, sets direction and appetite, allocates resources, and monitors whether results, incidents and residual risk return in a form the board can use.

Standing duties

• Direct the use of AI so purpose, values and residual-risk appetite set the boundary before any system is built or bought (DIR01–DIR05; ISO/IEC 38500 Evaluate–Direct–Monitor).
• Issue Act when a business need, purpose change or serious incident requires a governing-body decision (ACT01–ACT03).
• Commission the AI management system, strategy, portfolio, people capacity and vendor rules (Establish). Do not design them.
• Refuse to treat implementation or runtime as self-approving. High-risk go-live, intended-purpose change and residual-risk acceptance stay with this role or a named delegate with a recorded limit.
• Consume Review evidence (performance, control, compliance, independent assurance) and send findings back as new direction or Act.

Accountable to: Board of Directors / shareholders (or equivalent highest authority)

Primary domain: Direct (DIR01–DIR05). Issues Act. Commissions Establish. Consumes Review.

Linked EN 18286 clauses: 4.2, 4.4.1, 4.4.2, 4.4.3, 5.1, 5.3, 5.3.2, 6.2.1, 7.1, 7.3.2.2, 8.6, 9.4, 9.6.1, 9.7.1, 10.1.1, 10.1.1.2, 10.1.3

Format: 3 hours of training, EUR 200.