Templates
This section holds files you can download and fill in. Each one is built from the wiki pages it names, so it stays consistent with them. The ratings and defaults inside a template are examples: replace them with your own before relying on them.
How to use: download the file, read its README and License sheets (or the how-to-use box in a .docx) first, then follow the page that describes it.
| Template | Use it to |
|---|---|
| AI Risk Register Template (.xlsx) | Assess, treat and track AI risks |
| AI System Inventory Template (.xlsx) | Keep a record of every AI system, model, agent and AI feature in use |
| AI Use-Case Risk Triage Template (.xlsx) | Screen one use case, find the risks that apply and set its tier |
| AI Security Vendor Evaluation Scorecard (.xlsx) | Compare AI security products and record due diligence |
| AI Security Audit and Evidence Checklist Template (.xlsx) | Run a control audit with evidence, findings and exceptions |
| AI Security Control Library and Crosswalks Template (.xlsx) | Track control implementation and framework coverage |
| AI Security Test Case Tracker Template (.xlsx) | Plan, run and score AI security tests |
| AI Acceptable Use Policy Template (.docx) | Draft an AI acceptable use policy |
| AI Impact Assessment Template (.docx) | Assess an AI system's impact on people before go-live |
| AI Security Programme Charter Template (.docx) | Set up the AI security and governance programme in one approvable document |
| AI Incident Report Template (.docx) | Record one AI incident from detection to closure |
| AI Security Requirements Traceability Matrix Template (.xlsx) | Send a scoped set of control requirements to a vendor or system owner and review the answers |
| AI System Security Risk Review Checklist Template (.xlsx) | Review one AI system's security risk across its lifecycle and record its impacts and risks |
| AI Security Assurance Baseline Template (.xlsx) | Send a standalone, domain-organised requirements baseline to a vendor or system owner |
Data files (CSV)
The same content as plain CSV files, for loading into a GRC tool, a spreadsheet or your own scripts. They are regenerated from the wiki pages every time the site is built, so they always match the pages, and they use the wiki's IDs (AI-R, AI-CTRL and TC), which are never reused. The pages remain the authoritative version.
| File | What it holds | Built from |
|---|---|---|
| risk_register.csv | Every register risk: name, owner domain, example ratings and narrative | Enterprise AI Risk Register |
| risk_to_control.csv | Each risk's primary controls, control IDs and the evidence required | AI Risk to Control Mapping |
| controls.csv | Every control objective with its tier, scope and the risks it treats | Control Objectives Library |
| test_cases.csv | Every test case with severity, method and the controls it tests | Test Case Library |
| ai_risk_map_crosswalk.csv | The 55 categories of the AI Risk Map mapped to register risks | AI Risk Map Crosswalk |
The AI Risk Map crosswalk is adapted from the AI Risk Map v1.3 (2026) by Evan Wheeler (wheels344i-gte/ai-risk-map, RiskFramework.org), licensed under CC BY-SA 4.0. It maps the map's categories, not its individual factor IDs (AIRM-nnn), because the map's own CSV has not yet been compared with the wiki.
Pages in This Section
AI Risk Register Template (.xlsx)A downloadable Excel workbook for running an AI risk register: the wiki's risks pre-filled, use-case triage, likelihood and impact scoring, mapped controls and evidence, framework and regulatory crosswalks, a dashboard and tracking checks.
AI System Inventory Template (.xlsx)A downloadable Excel workbook for keeping an inventory of every AI system, model, agent and AI feature in use, with owner, tier, data, supplier, regulatory scope, assurance evidence and review checks.
AI Use-Case Risk Triage Template (.xlsx)A downloadable Excel questionnaire for one AI use case: a prohibited-use screen, the wiki's triage questions, T01 tier scoring, the register risks that apply with their controls and evidence, and whether a full impact assessment is needed.
AI Security Vendor Evaluation Scorecard (.xlsx)A downloadable Excel scorecard to compare up to five AI security products on the wiki's eight evaluation domains, with weighted scores, flags, required vendor evidence, PoC notes, a recommendation and a GCC and EU supplier due-diligence questionnaire.
AI Security Audit and Evidence Checklist Template (.xlsx)A downloadable Excel audit workbook: tests for every wiki control with evidence and audit procedures, the GCC and EU audit checklists and evidence registers, a findings log, an exception register and ISO/IEC 42001 certification readiness.
AI Security Control Library and Crosswalks Template (.xlsx)A downloadable Excel workbook of the wiki's AI security controls with every library field, ready to track implementation and testing, cross-referenced to every item of the wiki's framework crosswalks and to the register risks.
AI Security Test Case Tracker Template (.xlsx)A downloadable Excel tracker for AI security testing: the wiki's quick-start PoC scenarios and every case in the Test Case Library, with columns to select, run, score and evidence each one, and coverage by control and by register risk.
AI Acceptable Use Policy Template (.docx)A downloadable Word policy template for the acceptable use of AI: rules for everyone and for developers, approval before use, monitoring, roles, exceptions and training, with a policy-to-control mapping, a quick reference card and a user acknowledgement form.
AI Impact Assessment Template (.docx)A downloadable Word template for a combined data protection and fundamental rights impact assessment of an AI system, built from the wiki's GCC and EU impact assessment forms, with benefits, misuse, fairness, oversight, consultation and decision sections.
AI Security Programme Charter Template (.docx)A downloadable Word template that sets up an AI security and governance programme in one approvable document: scope, risk appetite, governance bodies, decision rights, policy, risk method, operating defaults, assurance, regulatory obligations, training, reporting and roadmap.
AI Incident Report Template (.docx)A downloadable Word template for recording one AI incident from detection to closure: summary, what happened, timeline, containment, evidence, notifications with their legal source, root cause across eight factors, impact, actions and closure.
AI Security Requirements Traceability Matrix Template (.xlsx)A downloadable Excel requirements matrix for the security review of one AI system: every requirement of the wiki's controls, scoped by assurance stage and deployment model, with columns for the vendor's response and the assessor's review and a live dashboard.
AI System Security Risk Review Checklist Template (.xlsx)A downloadable Excel checklist for reviewing the security risk of one AI system across its lifecycle: 150 review questions in nine categories, with an impact register, a risk register, threat and vulnerability lists and severity criteria.
AI Security Assurance Baseline Template (.xlsx)A downloadable Excel requirements baseline for the security review of an AI, GenAI or agentic system: 165 testable requirements in 14 domains mapped to ISO/IEC 42001, NIST AI RMF, the EU AI Act and OWASP, with vendor and assessor columns, a dashboard and an optional UAE and Dubai overlay.