THREE TIERS

One framework. Three tiers.
So you can start where you are.

EW-AiRM™ scales from a single AI system start-up to a global enterprise running hundreds of deployments. The framework is identical throughout; only the depth of its implementation changes.

'Core' is not a lesser EW-AiRM^TM version and 'Full' is not the "real deal" everyone migrates to: The tier is a match to organisational reality, not a maturity ladder.

Core

ENTRY

Start-/scale-ups and limited AI deployment:

<100 employees
1–5 AI system

Six pillars applied at conceptual level

HAiPECR^TM run as a pre-deployment filter

Top-tier MIT risks only (Primary mappings)

One named accountable owner per system

Quarterly review cycle

Self-assessment using the Maturity Tool

Adopt Core →

Standard

RECOMMENDED

For mid-market firms and regulated SMEs:

100–1,000 employees
5–25 systems

All six pillars with documented evidence

HAIPECR^TM pre-deployment + continuous review

Primary + Secondary MIT mappings

Two-line accountability (system + risk owner)

Six AI Black Swan categories rehearsed

Monthly KXI dashboard, quarterly board pack

Adopt Standard →

Full

ENTERPRISE

For global enterprises and systemically important institutions:

1,000+ employees
25+ systems)

All six pillars with second-line review

HAiPECR^TM audit trail per deployment

Full Primary / Secondary / Tertiary mappings

Three-line accountability + board sponsor

All eight Black Swan categories annually

Weekly KXI, monthly risk, quarterly board

Adopt Full →

FLOOR CONDITIONS: The 5 Non-Negotiables

Five things every tier must do.

Named accountability for every deployed AI system

HAiPEICR^TM run as documented pre-deployment filter

Human override capability tested with a 4-hour SLA

Documented board or executive risk acceptance

Incident reporting pathway, with named recipient

You can use our tiering and the assessment tools as diagnostic (you already have AI deployed), as a roadmap (you are about to deploy), or as a reference guide (you have specific governance problems).

Not sure which tier fits?

The Maturity Assessment Tool will tell you in 20 minutes. Free, runs in your browser, nothing leaves your machine.

Run the assessment →

Talk to us

The Human-Ai.Institute is an independent Think/Do Tank convening multilateral and multi-stakeholder dialogue on AI governance. The Institute engages with the UN, UNESCO, OECD, the EU Commission, and governments worldwide.

Home of EW-AiRM™ — the open, three-layer framework for enterprise-wide AI risk management, grounded in publicly licensed standards and aligned with UNESCO, UNECE, NIST, ISO, and the EU AI Act.

CONSULTING, TRAINING & ADVISORY

Commercial consulting, training, and advisory services are provided by De-Risking Solutions Ltd. and RiskAi.Ai

AI & TECHNOLOGY SOLUTIONS

AI, Agentic tools and technology solutions are provided by Human-Ai.Solutions.

Company

Connect with us

Listed on the OECD AI Policy Observatory · Founding member of the UN University AI Network · Aligned with UNESCO, UNECE WP.6, NIST, and ISO 42001

One framework. Three tiers. So you can start where you are.

'Core' is not a lesser EW-AiRMTM version and 'Full' is not the "real deal" everyone migrates to: The tier is a match to organisational reality, not a maturity ladder.