The VERITRAIL implementation runbooks turn controls into repeatable procedures with a trigger, an owner, steps and the evidence each step produces. The method for all eight runbooks is published on the implementation runbooks page. This library tracks editable versions you can adapt to your organization.
Library status
| Runbook | Controls | Method | Editable version |
|---|---|---|---|
| 1. Stand up the AI inventory | EI-01, EI-03, EI-09, EI-11 | Published | Coming soon |
| 2. Intake, triage and approval | EI-12, GL-01, GL-02, GL-03 | Published | Coming soon |
| 3. Onboard an agent to runtime guardrails | EI-07, IS-11, IS-12, IS-13 | Published | Coming soon |
| 4. Kill-switch and rollback drill | IS-15, GL-07 | Published | Coming soon |
| 5. AI incident response | SE-04, IS-15, AO-06 | Published | Coming soon |
| 6. Produce an evidence pack | SE-05, SE-02, SE-08 | Published | Coming soon |
| 7. Vendor AI review | GL-11, EI-08, AO-09 | Published | Coming soon |
| 8. Periodic recertification | GL-12, EI-11, SE-07 | Published | Coming soon |
Organizations in a Governance Baseline or the design-partner programme receive working versions adapted to their tooling.
VERITRAIL controls cited
- IS-15 Kill switch and rollbackNIST AI RMF: MANAGE 2.4ISO/IEC 42001: A.6.2.6EU AI Act: Art. 14
- SE-04 AI incident management and reportingNIST AI RMF: MANAGE 4.3, MANAGE 2.3ISO/IEC 42001: 10.2, A.8.4EU AI Act: Art. 73, Art. 26
- SE-05 Audit-ready evidence packsNIST AI RMF: GOVERN 1.4, MEASURE 2.9ISO/IEC 42001: 7.5, 9.2EU AI Act: Art. 11, Art. 18
Framework mappings are indicative VERITRAIL interpretations (Control Library v1.0.0); they are not legal advice and do not establish conformity or compliance.
Get notified
Subscribe to the newsletter to hear when editable runbooks are released.