chapter one

1 Governing Generative

 

This chapter covers

  • Why governance matters
  • Overview of governance, risk, and compliance
  • A practical governance model that captures policy, technical controls and continuous improvement

Generative AI (GenAI), the family of artificial intelligence models that can write text, draft code, and create images on demand is already reshaping day-to-day work. But breakthroughs may come hand-in-hand with failures. From lawyers sanctioned for filing court briefs full of AI-hallucinated case law[1], to security researchers showing Google's Gemini could be tricked into permanently storing false memories about users through invisible instructions hidden in ordinary documents[2], to Deepseek exposing over a million private chat logs and API keys through an unauthenticated database[3].

1.1 Why Governance, Risk and Compliance (GRC) for GenAI Matters Now?

1.2 GRC for AI: More Than a Compliance Checklist

1.3 A Mental Model for GenAI GRC

1.4 Challenges in Practice: Illustrative Scenarios

1.5 Tools and Practices You’ll Need

1.6 Motivation and What’s Ahead

1.7 Summary