Responsibility Register
Who holds each AI governance responsibility today, by name.
Most organizations have the responsibilities without the titles. A regulator or an underwriter asks for the name, not the title. One name per row, a backup, and a date you last checked that it was still true.
Educational template, not legal advice or a compliance certification.
| Responsibility | What it covers | Holder (one name) | Title today | Backup | Last reviewed |
|---|---|---|---|---|---|
| Trust engineering | Validates that AI systems conform to regulation and to contract | ||||
| Agentic workflow assurance | Keeps the end-to-end chain of automated decisions behind each critical service documented and reviewed | ||||
| AI testing and red-team coordination | Schedules and records jailbreak, prompt-injection and content-safety testing | ||||
| AI governance advice | Owns the AI Acceptable Use Policy and the register's review cadence | ||||
| AI security operations | Operates and reviews the guardrails and the gateways | ||||
| AI forensics | Reconstructs what an agent did, from logs, after an incident | ||||
| Incident signatory (per agent) | Signs the incident report when an AI agent causes the incident | ||||
| Runtime control owner | Owns the per-action record that shows the action an agent executed is the one that was authorized |
How to use it. One accountable name per row, never a team. Where one person holds several rows, write the name several times; the point is that the question "who?" has an answer. Review the page when a holder changes role and at least quarterly. The AI Acceptable Use Policy generated by SanctumShield lists the same holders in its deployed-agent section, so the two records agree.
Governance is an ongoing program, never a one-time audit. Date this page when you fill it in, and again when you review it.
Free, and there is nothing to sign up for. The Board AI Register and the free Shadow AI Risk Calculator are at sanctumshield.com/templates and sanctumshield.com/calculator.