A five-layer framework for AI governance: integrating regulation, standards, and certification

Purpose The governance of artificial intelligence (AI) systems requires a structured approach that connects high-level regulatory principles with practical implementation. Existing frameworks lack clarity on how regulations translate into conformity mechanisms, leading to gaps in compliance and enforcement. This paper aims to address this critical gap in AI governance. Design/methodology/approach A five-layer AI governance framework is proposed, spanning from broad regulatory mandates to specific standards, assessment methodologies and certification processes. By narrowing its scope through progressively focused layers, the framework provides a structured pathway to meet technical, regulatory and ethical requirements. Its applicability is validated through two case studies on AI fairness and AI incident reporting. Findings The case studies demonstrate the framework’s ability to identify gaps in legal mandates, standardization and implementation. It adapts to both global and region-specific AI governance needs, mapping regulatory mandates with practical applications to improve compliance and risk management. Practical implications By offering a clear and actionable roadmap, this work contributes to global AI governance by equipping policymakers, regulators and industry stakeholders with a model to enhance compliance and risk management. Social implications The framework supports the development of policies that build public trust and promote the ethical use of AI for the benefit of society. Originality/value This study proposes a five-layer AI governance framework that bridges high-level regulatory mandates and implementation guidelines. Validated through case studies on AI fairness and incident reporting, it identifies gaps such as missing standardized assessment procedures and reporting mechanisms, providing a structured foundation for targeted governance measures.