title: “Management Review Schema” description: “Machine-readable representation of AI governance management reviews.”
Management Review Schema
The Management Review Schema provides the machine-readable structure for representing formal reviews of AI governance performance, effectiveness, risks, issues, decisions, and improvement activities. Management review provides a governance mechanism for leadership or designated governance authorities to evaluate whether the AI governance system remains appropriate, effective, and aligned with organizational objectives and applicable requirements.Purpose
Management review supports structured oversight of the AIGO governance system. A management review may consider: * governance performance * governance objectives * AI system portfolio * significant risks * control performance * assessment results * assurance findings * monitoring results * incidents * material changes * approvals and exceptions * evidence quality * regulatory or organizational changes * maturity * improvement opportunities * unresolved actions The Management Review Schema provides the structural representation of the resulting review record.Management review inputs
Management review should consider information relevant to the effectiveness and continuing suitability of AI governance. Potential inputs include: * monitoring results * risk assessments * control assessments * assurance results * incidents * material changes * approval decisions * risk acceptance decisions * evidence deficiencies * evaluation results * validation results * stakeholder feedback * governance performance indicators * previous management review actions * changes in applicable requirements The specific inputs should be proportionate to the organization’s governance model and AI risk profile.Management review outputs
A management review may produce: * governance decisions * improvement actions * changes to governance objectives * changes to policies or procedures * changes to controls * changes to risk treatment * resource decisions * escalation decisions * additional assurance requirements * changes to monitoring * changes to governance criteria * assigned corrective or improvement actions Outputs should be recorded with sufficient information to establish accountability and follow-up.Decision traceability
Management review decisions should remain traceable to the information considered during the review. A representative relationship is: governance inputs → management review → decision → action → evidence → verification This allows an organization to reconstruct why a governance decision was made and determine whether resulting actions were completed.Relationship to assurance
Management review and assurance are related but distinct governance activities. Assurance provides structured examination of governance arrangements, controls, evidence, or outcomes. Management review considers governance information at an oversight level and determines whether action, escalation, resource allocation, or changes to the governance system are required. Assurance findings may therefore become inputs to management review.Relationship to continuous improvement
Management review provides an important input to continual improvement. Review outcomes may identify: * recurring control deficiencies * systemic governance weaknesses * emerging risks * ineffective procedures * insufficient evidence practices * changes required to governance criteria * opportunities to improve maturity * resource or capability gaps A representative improvement relationship is: management review → improvement decision → action → implementation → verificationRelationship to evaluation
Management review records may provide information used by the AIGO machine-readable evaluation layer. The evaluation architecture separates governance records from evaluation logic: governance records → rules → evaluation → result This allows defined governance conditions relating to management review to be evaluated without embedding evaluation logic directly into the Management Review Schema. Automated evaluation should support, rather than replace, leadership judgment and governance decision-making.Machine-readable governance
The Management Review Schema forms part of the AIGO machine-readable governance layer. It can be related to: * AI systems * risks * controls * assessments * approvals * monitoring * incidents * changes * assurance * evidence * improvements * governance records These relationships allow management review to operate as an oversight layer across the AIGO governance lifecycle.Review frequency
Management review frequency should be determined according to the organization’s governance model, AI system portfolio, risk profile, applicable requirements, and significant changes. Additional reviews may be initiated when circumstances require increased governance oversight. Examples include: * significant incidents * material system changes * significant risk changes * major assurance findings * changes in applicable requirements * significant governance failures * major organizational changesRecords and evidence
Management review records should preserve sufficient evidence of: * review scope * review date * participants or decision authorities * information considered * findings or observations * decisions * assigned actions * responsible owners * required follow-up * resulting evidence This supports accountability, traceability, assurance, and future management reviews.Validation
Management review records participate in the broader AIGO validation and traceability model. Repository validation may include checks relating to: * schema structure * references * traceability * evidence relationships * framework consistency * document integrity * repository health * machine-readable governance artifacts A successful validation result provides evidence about the integrity of the validated repository or artifact scope. It does not by itself establish legal compliance, certification, accreditation, or regulatory conformity.Canonical source
Machine-readable schema:schemas/11-management-review/11-AIGO-Management-Review-Schema-v0.1.json
Schema documentation:
schemas/11-management-review/11-AIGO-Management-Review-Schema-Documentation-v0.1.md