Exhibit A
The governance-framework section of the NAIC AI Evaluation Tool, covering board oversight, accountability, and internal controls for AI systems.
Exhibit A of the NAIC AI Evaluation Tool addresses governance, risk management, and internal controls. It asks insurers to show that AI risk is owned at the right level, that policies cover the full AI lifecycle, and that controls are in place to identify and escalate problems.
Key topics include:
- Board or senior-management accountability for AI risk.
- Written AI policies and procedures.
- Internal controls over AI development, acquisition, and use.
- Training and expertise for staff involved in AI systems.
Exhibit A is often the first place examiners look, because weak governance undermines the rest of the program. A strong answer usually includes a clear AI governance framework, a defined risk appetite, and evidence that the board or risk committee reviews AI risk regularly. See our NAIC AI Evaluation Tool guide for a complete breakdown.