The Definitive Guide to Responsible AI

As organizations are still attempting to figure out how to navigate AI risks, compliance, and governance, The Definitive Guide to Responsible AI is a timely guide to help set the foundation for responsible and trustworthy AI use. Written for anyone who is responsible for leading activities related to the development, implementation, or use of AI, this book benefits Chief AI Officers, Chief Information Security Officers, Chief Privacy Officers, and Chief Compliance Officers, as well as other executives, leaders, or implementors dealing with AI initiatives at an organizational level. This book will help them:

• Mitigate risks when deploying AI in organizations.
• Conduct systems, data protection, and rights impact assessments.
• Implement AI governance policies and processes.
• Benchmark and measure AI systems.

This book uses a standard approach that helps readers understand complex topics by breaking them down and making them easier to comprehend. Featuring processes to implement AI responsibly, this book covers basic concepts to aid readers apply current AI frameworks and prepare them for implementing future ones safely and ethically. This book also explores AI management systems, managing AI-related risk, and responsible AI performance.

John J. Trinckes, Jr. is the Director of GRC Services at Elevate Consult LLC, and the author of How Healthcare Data Privacy is Almost Dead… and What Can Be Done to Revive It!, The Definitive Guide to Complying with the HIPAA/HITECH Privacy and Security Rules, and The Executive MBA in Information Security all published by CRC Press. As a member of the senior leadership team, he is responsible for the delivery of quality cybersecurity, privacy, and AI advisory services to multiple clients. He maintains the following credentials: CMMC CCA/CCP, CISSP, CISM, CDPSE, CRISC, CSA CCSK, PECB ISO/IEC 27001 Sr. LA and Sr. LI, PECB ISO/IEC 42001 Lead Implementer and Lead Auditor, DHS Section 508 Trusted Tester, NSA IAM/IEM, and HITRUST CDA. As a former Data Protection Officer and Chief Information Security Officer, he led efforts and maintained several highly recognized (and coveted) certifications such as the ISO 27001 (Information Security Management System – ISMS) with enhanced ISO 27017 (Cloud Security controls), the ISO 27701 (Privacy Information Management System – PIMS) with enhanced ISO 27018 (Cloud Privacy Controls), the ISO 9001 (Quality Management System – QMS), the ISO 42001 (AI Management System – AIMS), and HITRUST CSF i1 certification. He also led efforts in maintaining SOC 2 Type II attestation, EU‑US Data Privacy Framework (DPF), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Asia‑Pacific Economic Cooperation (APEC) – Privacy Recognition for Processors (PRP) Certification.