AI governance evidence pack

HireAI deployment review

Northstar People Operations · Junior Product Analyst scenario

Prepared by: Learner name not added
Date generated: Preparing date…

Training simulation only. Not for live recruitment use.

Scenario summary

Northstar People Operations proposes using HireAI for first-pass CV screening. This review assesses a fictional system that compares applications with a job description, generates scores and recommends whether candidates should be shortlisted.

1. AI system description

System name: Not completed
Business purpose: Not completed
Main users and AI actors: Not completed
Affected people: Not completed
AI capability and model type: Not completed
Data used: Not completed
Decision supported and human role: Not completed
Potential harms and assumptions: Not completed
Evidence and governance questions: Not completed

2. Stakeholder and harm assessment

Stakeholder group: Not completed
Level of harm: Not completed
How are they affected?: Not completed
Possible harm: Not completed
Severity: Not completed
Likelihood: Not completed
Existing control: Not completed
Additional control and communication: Not completed
Mitigation response: Not completed
Evidence needed: Not completed
Owner: Not completed
Should this block launch?: Not completed

3. Risk register

Risk title: Not completed
Cause: Not completed
Risk event: Not completed
Impact: Not completed
Likelihood: Not completed
Severity: Not completed
Inherent risk: Not completed
Controls: Not completed
Residual risk: Not completed
Risk owner: Not completed
Evidence: Not completed
Status: Not completed

4. Human oversight, privacy and vendor review

Where human review happens: Not completed
Who reviews, and what they see: Not completed
Override and audit trail: Not completed
Reviewer training: Not completed
Decisions AI cannot make: Not completed
Escalation, appeal and redress: Not completed
How rubber-stamping is prevented: Not completed
Privacy / DPIA screening: Not completed
Transparency and meaningful explanation: Not completed
Safety and reliability checks: Not completed
Security checks: Not completed
Vendor evidence questions: Not completed

5. Final recommendation

Recommendation: Not completed
Summary reasoning: Not completed
Top three risks: Not completed
Required controls: Not completed
Evidence required before launch: Not completed
Residual risk: Not completed
Monitoring after launch: Not completed
Conditions for approval: Not completed
Who signs off: Not completed

Selected controls

No controls selected.

6. Assurance testing workpaper

Assurance objective: Not completed
Population and period: Not completed
Sampling approach: Not completed
Test procedure: Not completed
Exceptions and root cause: Not completed
Finding and severity: Not completed
Management action: Not completed
Board / audit summary: Not completed