Research artefacts of the MSc Cybersecurity project (UCD School of Computer Science, supervised by Dr Rob Brennan) investigating how far an auditable, usable, evidence-informed GRC operating model for enterprise AI governance can be developed from AI incident reports, regulatory analysis and governance principles. The record contains the Enterprise AI Governance Toolkit (a 97-control, four-step workbook integrating ISO/IEC 42001, ISO/IEC 27001, the NIST frameworks and the EU AI Act), with a completed demonstration copy; the AI Incident Analysis Report, derived from a purposive 30-incident sample of the AI Incident Database analysed through a realist Context-Mechanism-Outcome lens, with the coded working data; and the Practitioner Survey Analysis Report (n = 21) with anonymised raw responses. See README.md for the file manifest and full methodology and provenance notes. Three artefacts are published (Artefacts 1, 2 and 3) as per the research project deliverables, with two additional supporting files: the AI Incident Analysis working data and the completed toolkit demonstration.
No takes yet. Share an insight, caveat, or question.
Daniel Doyle (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: