Frameworks & Regulations

The White House Just Published a National AI Framework. Don’t Rewrite Your Governance Program Yet.

The Trump administration released its National Policy Framework for AI on March 20, 2026. It's ambitious in scope, thin on substance, and still needs Congress to act. Here's what it actually means for your AI program.

By AIPMO

/ 22 Mar 2026 · 5 min read

NEW - AI Governance for U.S. Projects: What Actually Applies?

The US has no comprehensive federal AI law. What applies to your project depends on your sector, your use cases, and which states your users are in. Here's how to navigate a landscape built from executive orders, voluntary standards, existing law, and accelerating state regulation.

By AIPMO

/ 29 Jan 2026 · 16 min read

NEW - What the EU AI Act Means for Your Project Timeline

The EU AI Act's August 2026 general application date is a statutory deadline, not a target. Here's what high-risk AI systems must actually deliver, how the conformity assessment pathways work, what the transitional provisions mean for systems already in service, and where the penalties sit.

By AIPMO

/ 28 Jan 2026 · 15 min read

NEW - AI Risk Classification: A Project Scoping Exercise

The EU AI Act's four-tier risk framework is a project scoping tool, not just a compliance checklist. This article covers all four tiers, the Article 6(3) downward self-classification mechanism, the profiling override that closes the most common gap, and how classification drives planning decisions.

By AIPMO

/ 28 Jan 2026 · 11 min read

NEW - OECD AI Principles: What They Mean for Your Project

The OECD AI Principles are the source document behind most AI governance frameworks — including the EU AI Act, NIST AI RMF, and ISO 42001. Understanding the five principles, including the 2024 updates, helps PMs understand why downstream requirements are what they are.

By AIPMO

/ 28 Jan 2026 · 12 min read

IMP - ISO 42001 for Project Managers

ISO 42001 is a certifiable AI management system standard — not a risk framework or a checklist. Its AI-specific requirements in Clauses 6 and 8 generate concrete PM deliverables: risk assessments, impact assessments, lifecycle controls, and supply chain governance.

By AIPMO

/ 28 Jan 2026 · 13 min read

IMP - The PM's Guide to NIST AI RMF

The NIST AI RMF isn't a checklist — it's 72 subcategories across four functions that you're meant to select from based on your system's risk level. Here's what each function actually requires a project team to do, and where most AI projects currently have gaps.

By AIPMO

/ 28 Jan 2026 · 11 min read

IMP - AI Impact Assessments: Running Them Like a PM

An AI impact assessment asks who could be harmed by this system — not just what could go wrong with it. Those are different questions. Here's what the frameworks actually require, why the PM needs to own it, and how to run one that produces decisions rather than paperwork.

By AIPMO

/ 28 Jan 2026 · 11 min read