Audit Committee AI Governance Playbook

Question one

What this committee oversees.

The Audit Committee tests whether management assertions about AI use, control operation, financial reporting, and regulatory conformity are supported by evidence that can withstand review.

Audit owns assurance and disclosure integrity. Enterprise risk appetite and incident response remain with Risk unless the event affects reporting, controls, or auditor reliance.

Reference boundary reviewed 28 July 2026. Committee authority remains subject to each company's governing documents.

Question two

What it should review.

Signal	Alpha surface	Cadence	Workflow state
Control tests without current evidence	Terminal · Evidence record	Monthly	Review
AI-related disclosure changes	Ratings · Disclosure view	Quarterly	Monitor
Unresolved audit exceptions	Terminal · Decision record	Monthly	Escalate
Third-party assurance coverage	Standard · Evidence mapping	Quarterly	Review
Policy-to-control mapping drift	Terminal · Control register	Monthly	Monitor
Rating evidence limitations	Ratings · Basis of opinion	On change	Disclose

Workflow states indicate reference review priority. They are not live client data or a statement about any company.

Question three

What Alpha surfaces for it.

Evidence record

A dated trail from disclosure or control claim to the supporting source and review state.

Control register

Named controls, accountable owners, test cadence, exceptions, and remediation dates.

Basis of opinion

The evidence boundary, analytical rationale, limitations, and human approval state.

Question four

What it receives.

Deliverable	Cadence	Format	Channel
Control exception register	Monthly	Table	Committee portal
Disclosure change note	Quarterly	Brief	Board package
Assurance coverage map	Quarterly	Matrix	Committee portal
Annual control attestation	Annual	Record	Board package

Open methodology record Read the independence policy