AI Governance: A Security and Privacy Organizational Standard Architecture (SPOSA)

Artificial Intelligence offers unprecedented opportunities but its adoption also amplifies risks for organizations and individuals. To cope with such risks in the context of an evolving and articulated regulatory framework that includes (but it is not limited to) the EU AI Act, GDPR, CRA, NIS2, governance frameworks are crucial. However, it is important to bridge the gap between AI Governance models and daily ICT operations. This paper puts forward the idea of a conceptual model to help organizations to navigate such complex governance context considering simplification as the main driver.