Identification of Stakeholders
确定利益相关者
Based on discussions during the first client meeting, and later confirmed during the second meeting, four primary stakeholder roles have been identified for the system under development. Each role plays a part in the compliance, auditing, and governance processes surrounding AI systems.
根据第一次客户会议期间的讨论,以及后来在第二次会议上确认的讨论,已经为正在开发的系统确定了四个主要的利益干系人角色。每个角色在围绕 AI 系统的合规性、审计和治理流程中都发挥着作用。
Note - These personas have been validated by the client in the Sprint 2 Review.
注意 - 这些角色已由客户在 Sprint 2 Review 中验证。
Internal Compliance Manager:
内部合规经理:
Internal Compliance Manager operates within the organisation that is subject to audit. Their primary responsibility is to ensure the organization continuously adheres to relevant regulations
Internal Compliance Manager 在需要审核的组织内运作。他们的主要职责是确保组织持续遵守相关法规
Works within the organization being audited
在被审核的组织内工作Responsible for ensuring the organisation follows regulations and standards
负责确保组织遵守法规和标准Prepares evidence and documentation for audits
准备审计证据和文件Implements recommended changes after audits
在审核后实施建议的更改Focuses on ongoing compliance rather than periodic assessment
侧重于持续的合规性,而不是定期评估
Internal Auditor:
内部审计师:
Internal Auditors are often external professionals hired to conduct independent assessments of the organization's compliance status.
内部审计师通常是聘请对组织的合规状况进行独立评估的外部专业人员。
Often outsourced contractors (not permanent employees)
通常是外包承包商(非长期雇员)Appointed by the CEO to investigate specific issues
由 CEO 任命调查特定问题Reports to the CEO, who presents findings to the board
向首席执行官报告,首席执行官向董事会提交调查结果Conducts regular audits (typically every six months)
进行定期审计(通常每六个月一次)Focuses on regulatory compliance
专注于监管合规
AI System Developers/Owners:
AI 系统开发人员/所有者:
AI System Developers are technical professionals responsible for designing, developing, maintaining, and updating AI systems deployed.
AI 系统开发人员是负责设计、开发、维护和更新已部署的 AI 系统的技术专业人员。
Need to understand compliance requirements
需要了解合规性要求May need to modify AI systems based on audit findings
可能需要根据审计结果修改 AI 系统Provide technical documentation as evidence
提供技术文档作为证据
Senior Management/Board Members:
高级管理层/董事会成员:
Senior Management/Board Members are high-level stakeholders are the recipients of synthesized audit reports and use them to guide strategic decisions
高级管理层/董事会成员是高级利益相关者,是综合审计报告的接收者,并使用它们来指导战略决策
Not direct users of the system
不是系统的直接用户Receive final reports and insights
接收最终报告和见解Need simplified, non-technical explanations of AI risks
需要对 AI 风险进行简化的非技术性解释Make critical decisions about AI deployment
做出有关 AI 部署的关键决策Quarterly review of audit and risk information
审计和风险信息的季度审查
Creation of Personas
创建 Personas
After the initial role identification, we conducted two interviews sessions with the client to gather more relevant information and validate the accuracy personas.
在初步确定角色后,我们与客户进行了两次访谈,以收集更多相关信息并验证准确性角色。
Our process began with client interviews and analysis based on meeting notes, key responsibilities and interactions of each stakeholder were disccussed, and later confirmed by our client.
我们的流程从客户访谈开始,根据会议记录进行分析,讨论每个利益相关者的关键职责和互动,然后由我们的客户确认。
Each personas was constructed with a fictional name, job title and background, in order to reflect a more realistic profile. We synthesized characteristics and expanded on them with more details from client provided documentation and public available resources related to compliance and auditing.
每个角色都是用虚构的名字、职称和背景构建的,以反映更真实的个人资料。我们综合了特征,并通过客户提供的文档和与合规性和审计相关的公共可用资源中的更多详细信息对其进行了扩展。
During the third client meeting, we presented the drafted personas to the client for validation. The client found all the personas to be well-crafted and aligned with her expectations.
在第三次客户会议期间,我们将草稿的角色提交给客户进行验证。客户发现所有角色都经过精心设计,符合她的期望。