4 HUMAN IN THE CORE
is attributed to a named human at every consequential step. This is not a slo-
gan. It is what the regulatory texts have already committed to, in plain lan-
guage, and much of this book is the work of showing what that commitment ac-
tually requires.
1.2 Who This Book Is For
This book is for the leader of a regulated enterprise whose career depends on
getting AI right. The title varies with organization size. Chief Executive Officer
at a small life-sciences or fintech firm. Chief Compliance Officer, Chief Risk
Officer, or Chief Digital Officer at the mid-size. Senior Vice President of AI
Governance, or Chief AI Officer, at the largest. The position is constant: a leader
who will be held accountable for the architectural commitments their organiza-
tion runs under, and who can delegate downstream once they hold the analysis
whole.
It is also a book for the consultants, architects, governance leads, and regula-
tory affairs officers who serve those leaders. The CxO commits the enterprise
the consultant advises and helps build. The ratio is something like one execu-
tive to several hundred advisors, integrators, and implementation partners
whose work shapes what actually gets built. The book serves both populations:
substantive enough to satisfy the practitioner, plainly written enough that an
executive can hold the entire picture and ask the questions that drive their
organization.
What this book is matters as much as who it is for. It is an analysis. Not a regula-
tions reference, not a narrative business book, not a technical manual. It is a
dissection of what the major regulators and standards bodies set out when they
are read together. Regulators and standards bodies across three continents, and
the leading advisory firms alongside them, describe the same architectural
commitments for AI in regulated enterprise. The book's contribution is to show
those commitments, category by category, with the joints between them and
the inspection paths an auditor will traverse.
The analysis is deliberately multi-industry. It reads the regulatory influences of
several heavily regulated sectors at once, and the inclusion of automotive and
nuclear, among others, is not incidental. Many of the examples lean toward life
sciences, because that is the world I have principally served. The value, though,
is the convergence itself, and the projection of those shared commitments onto
the architectural layers any regulated enterprise has to build. The layers are the
same whatever the sector the examples come from.
is attributed to a named human at every consequential step. This is not a slo-
gan. It is what the regulatory texts have already committed to, in plain lan-
guage, and much of this book is the work of showing what that commitment ac-
tually requires.
1.2 Who This Book Is For
This book is for the leader of a regulated enterprise whose career depends on
getting AI right. The title varies with organization size. Chief Executive Officer
at a small life-sciences or fintech firm. Chief Compliance Officer, Chief Risk
Officer, or Chief Digital Officer at the mid-size. Senior Vice President of AI
Governance, or Chief AI Officer, at the largest. The position is constant: a leader
who will be held accountable for the architectural commitments their organiza-
tion runs under, and who can delegate downstream once they hold the analysis
whole.
It is also a book for the consultants, architects, governance leads, and regula-
tory affairs officers who serve those leaders. The CxO commits the enterprise
the consultant advises and helps build. The ratio is something like one execu-
tive to several hundred advisors, integrators, and implementation partners
whose work shapes what actually gets built. The book serves both populations:
substantive enough to satisfy the practitioner, plainly written enough that an
executive can hold the entire picture and ask the questions that drive their
organization.
What this book is matters as much as who it is for. It is an analysis. Not a regula-
tions reference, not a narrative business book, not a technical manual. It is a
dissection of what the major regulators and standards bodies set out when they
are read together. Regulators and standards bodies across three continents, and
the leading advisory firms alongside them, describe the same architectural
commitments for AI in regulated enterprise. The book's contribution is to show
those commitments, category by category, with the joints between them and
the inspection paths an auditor will traverse.
The analysis is deliberately multi-industry. It reads the regulatory influences of
several heavily regulated sectors at once, and the inclusion of automotive and
nuclear, among others, is not incidental. Many of the examples lean toward life
sciences, because that is the world I have principally served. The value, though,
is the convergence itself, and the projection of those shared commitments onto
the architectural layers any regulated enterprise has to build. The layers are the
same whatever the sector the examples come from.