Colorado Artificial Intelligence Act (proposed SB 24-205)
Colorado AI Act: Deployer Duties (6-1-1703)

Colorado Artificial Intelligence Act (proposed SB 24-205) CO-AIA-1703-2: Risk Management Policy and Program

The deployer must implement a risk-management policy and program governing high-risk AI deployment, that is iterative, regularly reviewed/updated, and reasonable considering a nationally/internationally recognised AI risk-management framework such as the latest NIST AI Risk Management Framework or ISO/IEC 42001, or a framework designated by the Attorney General.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 3 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 23894:2023 · 1 control

  • 23894-5.4.2 AI Risk Management Policy

NIST AI Risk Management Framework (AI RMF 1.0) · 1 control

  • AIRMF-MN-1.1 A determination is made as to whether the AI system achieves its intended purpose and stated objectives and whether its development or deployment should proceed

OECD AI Principles · 1 control

  • OECDAI-4 Accountability, Lifecycle Coverage, Documentation, and Record-Keeping

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Colorado AI Act: Deployer Duties (6-1-1703)

Query this from an agent

The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Colorado Artificial Intelligence Act (proposed SB 24-205) controls