CWA 18398 · assessment rubric

E.9 IS Governance

Level e-4

From role 5.2 AI Compliance Officer · EQF EQF7

Design, apply, and evaluate AI governance frameworks and lifecycle controls, by integrating regulatory requirements, ethical principles, organisational risk appetite, and business objectives to guide responsible AI deployment, manage AI-specific risks, and support accountable decision- making in organisational and sectoral contexts.

9.1 Design and apply AI governance frameworks to guide real-world AI deployment, aligning governance controls with business objectives and risk appetite.
Assessed by Applied AI Governance Framework submission, assessed for application to real-world AI deployment and alignment of governance controls with business objectives and risk appetite.
9.2 Evaluate the effectiveness of AI governance practices, reviewing AI system performance, compliance outcomes, and incident handling.
Assessed by Governance Effectiveness Report evaluated against AI system performance metrics, compliance outcomes, incident handling, and evidence of governance effectiveness.
9.3 Coordinate AI governance activities across stakeholders, including technical, legal, and business roles, to ensure accountable AI use.
Assessed by Stakeholder Coordination Plan assessed for clarity of technical, legal, and business roles, responsibilities, collaboration mechanisms, and accountability for AI use.
9.4 Identify and manage operational and regulatory risks in AI initiatives, implementing mitigations and reporting mechanisms.
Assessed by Risk Mitigation Register graded for completeness, accuracy, identification and management of operational and regulatory risks, suitability of mitigation strategies, and inclusion of reporting mechanisms.
9.5 Recommend actionable improvements to AI governance, balancing regulatory obligations, ethical principles, and operational feasibility.
Assessed by Improvement Recommendations Report evaluated for practicality, regulatory alignment, ethical soundness, operational feasibility, and actionability of AI governance improvements. GOVERNANCE [5]

Level e-5

From role 4.1 AI Transformation Lead · EQF EQF8

Create, justify, and critically evaluate enterprise-level AI governance strategies, by developing novel governance models and decision frameworks that address emerging AI technologies, societal impacts, and regulatory evolution, and that shape responsible, sustainable AI practices across organisations or ecosystems.

8.1 Critically evaluate existing AI governance frameworks and strategies, examining their suitability for emerging AI technologies and societal expectations.
Assessed by Critical Governance Evaluation Report assessed for depth of critical analysis, suitability of existing AI governance frameworks, and alignment with emerging AI technologies and societal expectations.
8.2 Create advanced AI governance approaches, integrating regulatory, ethical, organisational, and technological considerations.
Assessed by Advanced Governance Strategy Document graded for creation of advanced AI governance approaches and integration of regulatory, ethical, organizational, and technical considerations.
8.3 Assess long-term implications of AI governance decisions, including systemic risk, trust, and sustainability impacts.
Assessed by Impact Assessment Report assessed for thoroughness, methodology, and evaluation of long- term governance implications, including systemic risk, trust, and sustainability impacts.
8.4 Formulate recommendations for strategic AI governance improvements, supported by evidence and scenario analysis.
Assessed by Strategic Recommendation Dossier graded on evidence support, feasibility, clarity, and use of scenario analysis to formulate strategic AI governance improvements.
8.5 Justify and defend strategic AI governance positions, articulating well-founded arguments to senior decision-makers or expert audiences.
Assessed by Governance Defence Brief evaluated via oral presentation or written defence, assessed for argumentation, justification quality, and suitability for senior decision-makers or expert audiences. MANAGEMENT [4]

From role 4.2 Chief AI Officer (CAIO) · EQF EQF8

9.1 Critically evaluate existing AI governance frameworks and strategies, examining their suitability for emerging AI technologies and societal expectations.
Assessed by Critical Governance Evaluation Report assessed for depth of critical analysis, suitability of existing AI governance frameworks, and alignment with emerging AI technologies and societal expectations.
9.2 Create advanced AI governance approaches, integrating regulatory, ethical, organisational, and technological considerations.
Assessed by Advanced Governance Strategy Document graded for creation of advanced AI governance approaches and integration of regulatory, ethical, organizational, and technical considerations.
9.3 Assess long-term implications of AI governance decisions, including systemic risk, trust, and sustainability impacts.
Assessed by Impact Assessment Report assessed for thoroughness, methodology, and evaluation of long- term governance implications, including systemic risk, trust, and sustainability impacts.
9.4 Formulate recommendations for strategic AI governance improvements, supported by evidence and scenario analysis.
Assessed by Strategic Recommendation Dossier graded on evidence support, feasibility, clarity, and use of scenario analysis to formulate strategic AI governance improvements.
9.5 Justify and defend strategic AI governance positions, articulating well-founded arguments to senior decision-makers or expert audiences.
Assessed by Governance Defence Brief evaluated via oral presentation or written defence, assessed for argumentation, justification quality, and suitability for senior decision-makers or expert audiences. MANAGEMENT [4]

From role 5.1 AI Governance Officer · EQF EQF8

8.1 Critically evaluate existing AI governance frameworks and strategies, examining their suitability for emerging AI technologies and societal expectations.
Assessed by Critical Governance Evaluation Report assessed for depth of critical analysis, suitability of existing AI governance frameworks, and alignment with emerging AI technologies and societal expectations.
8.2 Create advanced AI governance approaches, integrating regulatory, ethical, organisational, and technological considerations.
Assessed by Advanced Governance Strategy Document graded for creation of advanced AI governance approaches and integration of regulatory, ethical, organizational, and technical considerations.
8.3 Assess long-term implications of AI governance decisions, including systemic risk, trust, and sustainability impacts.
Assessed by Impact Assessment Report assessed for thoroughness, methodology, and evaluation of long- term governance implications, including systemic risk, trust, and sustainability impacts.
8.4 Formulate recommendations for strategic AI governance improvements, supported by evidence and scenario analysis.
Assessed by Strategic Recommendation Dossier graded on evidence support, feasibility, clarity, and use of scenario analysis to formulate strategic AI governance improvements.
8.5 Justify and defend strategic AI governance positions, articulating well-founded arguments to senior decision-makers or expert audiences.
Assessed by Governance Defence Brief evaluated via oral presentation or written defence, assessed for argumentation, justification quality, and suitability for senior decision-makers or expert audiences. GOVERNANCE [5]