Docs

Appearance

Scope Phase ​

Scope is where you define what is being governed and what “in scope” means. A good scope makes every later step faster: Requirements map cleanly, risks are comparable, and reviews become auditable instead of interpretive.

ScopeDefine the system and governance scope
ImplementExecute Controls and attach Evidence
MonitorKeep governance continuously current
AuditPrepare internal review and exports

Outcome ​

You leave this phase with:

  • a registered AI System representing the deployed system (or governance initiative)
  • clear ownership and review roles
  • frameworks attached so Requirements and Controls are in scope
  • initial risks and Evidence planning so implementation can start immediately

Time to first value: 30–60 minutes
Prerequisites: you can create or edit the AI System, or you can work with an AI System Owner

Path at a glance ​

Step 1: Register the AI System ​

Goal: establish the unit of governance.

Where in Modulos

  • AI Registry → New AI System to register an AI System
  • AI System → Settings → General Settings to describe the system and lifecycle stage

Do this

  • Create the AI System with a specific, recognizable name.
  • Describe what the system does, who it affects, and where it is deployed.
  • Set the lifecycle stage to reflect reality.

You’re done when

  • a reviewer can understand what is being governed without additional context

Step 2: Assign owners and AI System roles ​

Goal: make accountability explicit from day one.

Where in Modulos

  • AI System → Settings → User Access

Do this

  • Assign at least one Owner; add Editors for the people implementing Controls and attaching Evidence, and a Viewer for read-only oversight.

You’re done when

  • the AI System has clear ownership and review responsibility

Step 3: Attach the right frameworks ​

Goal: define what “compliance” and “readiness” mean for this system.

Where in Modulos

  • AI System → Settings → Frameworks
  • AI System → Settings → EU AI Act when relevant for classification and scoping

Do this

  • Attach the frameworks and standards that apply to this system.
  • Record key scoping decisions and classifications where required.

You’re done when

  • Requirements and Controls are scoped to the frameworks you care about

Step 4: Capture initial risks and Evidence context ​

Goal: enable fast implementation by starting from what matters most.

Where in Modulos

  • AI System → Risks to add initial AI System risks and threat selection
  • AI System → Evidence to understand what artifacts already exist

Do this

  • Identify the top risks for this system and select the most relevant threat vectors.
  • Identify what Evidence already exists (policies, logs, design docs) that can support Control execution.

You’re done when

  • there is a first-pass risk and Evidence plan to drive implementation

Next ​

Implement phase

Execute Controls, attach Evidence, and move readiness through review

AI Product Owner path

A role-based walkthrough for documenting the AI system