# GOV-01 Risk owner designation

Domain: GOV Governance & Accountability · HI-AAF v1.3 · Public review · https://humanintel.net/standard/gov/gov-01

Every production agent has a designated technical owner and a business owner, documented in an agent registry.

A named individual, not a team or a role queue, is the accountable risk owner for each agent. The risk owner has the documented authority to suspend the agent at any time without further approval, and is the point of contact for HI-AAF assessors during a Letter of Assessment.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for GOV-01: Risk owner is recorded in the agent registry with current contact information; the suspend authority has been exercised in at least one drill or live incident; succession is documented.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Risk owner is recorded in the agent registry with current contact information.
- The suspend authority has been exercised in at least one drill or live incident.
- Succession is documented.

## Framework mappings

- NIST AI RMF: GOVERN 2.1, GOVERN 2.2
- ISO/IEC 42001: 5.3, A.2.2
- SOC 2 (TSC): CC1.3, CC1.4
- EU AI Act: Art. 9(1)
- Singapore: MAIGF Internal Governance, AI Verify Accountability

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Glossary: Risk owner: https://humanintel.net/standard/glossary#risk-owner

## Cite this control

Human Intelligence. HI-AAF v1.3, GOV-01 Risk owner designation. Public review edition, July 2026. https://humanintel.net/standard/gov/gov-01