AIQA Global Unveils AIQ DNA to Stress-Test AI Governance Controls

The framework categorizes 46 datapoints under structural governance, such as board oversight and budget allocation. The remaining 204 datapoints map directly to operational capability. The 'Deter' function commands the largest share with 123 datapoints, covering pre-deployment reviews and access authority. 'Notify' includes 41 points focused on anomaly detection and logging, while 'Act' accounts for 40 points dedicated to incident response and remediation.

Co-Founder and Chairman James E. Malackowski argues that corporate boards require practical answers regarding system reach and shutdown authority rather than abstract policy definitions. This methodology arrives as the industry pivots toward verified outcomes, highlighted by recent internal security lapses at OpenAI. Chief Technology Officer Chase Malackowski noted that incidents often stem from governance failures—specifically, misjudgments regarding which controls apply to specific environments—rather than simple technology glitches.

Maria Ross, AIQA’s Chief Operating Officer, developed the framework with an eye toward the insurance sector. By quantifying observable risk characteristics, the model aims to provide insurers with data that could eventually prove predictive of loss. AIQA maintains its role as an independent assessor, using AIQ DNA to provide a granular view of an organization's governance balance without offering cybersecurity products or remediation services.