A Primer - AI Risk Management for Risk and Compliance

You have been handed AI risk. The business ships faster than you can review, the frameworks keep multiplying, and the checklists the consultants sell map to everything and manage nothing. This primer is the answer in six questions, read from the second line's seat. Consistency first, org chart second. Own the net that catches AI as it enters, then go to the low-rated. Make the inventory the command centre. Test to your task, not their benchmark. Run a system, not a checklist. And decide where fast is safe. It closes with the three places risk actually hides from you - the low rating, the inventory gap, and your own challenge on paper - and a start you can make this week: pull three systems rated low and ask why. Drawn from the final MAS Guidelines on AI Risk Management (October 2026), by the person who wrote them. About twenty pages, written plainly, and deliberately boring. This primer is the gateway to the full book, *AI Risk Management for Risk and Compliance* (listed here separately), which works each question in depth - the three lines, the inventory and the rating, the controls before and after go-live, third-party AI, and building your own function. If this primer was useful, pass it along.

For the second line's view and how this fits, see AI risk management for risk and compliance. https://quaintitative.com/ai-risk-management-for-risk-and-compliance/