Skip to content

PEAKDEFENCEWINGMAN · Use cases

EU AI Act

Keep an AI use case registry and link each use case to its obligations, risks and controls.

Typical requirementsEU AI ActISO/IEC 42001

Stage 1 of 5
AI use case registry
Each AI use case is an asset, linked to the systems, data and suppliers it uses.
Assets Suppliers
Links used
1. Assets depends on Assets
2. Suppliers provides Assets
WINGMAN and AI support
Drafts entries from procurement and system records.
Decides: Use case owners confirm.
Stage 2 of 5
Classification
The risk category decides which obligations apply, and they map to obligations already met elsewhere.
Requirements Assets
Links used
1. Requirements maps to Requirements
WINGMAN and AI support
Proposes the category with reasons.
Decides: The compliance lead decides.
Stage 3 of 5
Risks and controls
Risks of the use case and the controls that meet the obligations.
Risks Assets Controls Requirements
Links used
1. Risks affects Assets
2. Controls reduces Risks
3. Requirements met by Controls
WINGMAN and AI support
Reuses existing controls.
Decides: Owners confirm.
Stage 4 of 5
Roles
Provider or deployer duties sit with roles.
Roles Assets
Links used
1. Roles owns Assets
WINGMAN and AI support
Lists duties per role.
Decides: Management assigns.
Stage 5 of 5
Evidence and monitoring
Evidence for each control, and signals from monitoring the system in use.
Controls Evidence Signals Risks
Links used
1. Controls proven by Evidence
2. Signals indicates Risks
WINGMAN and AI support
Tracks evidence expiry and incidents.
Decides: Owners act.

Screens for this stage · Stage 1: AI use case registry

The asset registry — Assets The asset registry Business owner and technical owner per asset, type (software, service offering, documentation, facilities), status and tags. Suppliers, provided services and AI use cases are subtypes.

Screens for this stage · Stage 3: Risks and controls

The review brief with a suggested rating change — Tasks The review brief with a suggested rating change After Start review, the brief proposes likelihood 3 → 4 with its reasoning: the system is in active use and no accuracy monitoring is deployed yet. Accept or Skip, then Complete review.

Findings against the task checklist — Ask Wingman · step 1 Findings against the task checklist The skill walks the task's own checklist: likelihood and impact need a decision, the definition is fine, the treatment plan needs updating, three overlapping review tasks should be consolidated. It offers to propose each change.

Sector angles

What this use case looks like under specific regulations.

AI governance

The core of this angle. The AI use case registry, classification, risks and controls, and monitoring in use.

Videos

EU AI Act compliance with WINGMAN, including ISO/IEC 42001 and EN 18286 Meeting the EU AI Act with WINGMAN, with ISO/IEC 42001 and EN 18286 covered by the same AI use cases, risks and controls.

Plays from youtube-nocookie.com. YouTube sets no cookies until you press play.

Other use cases

New requirements

Implement a new regulation or standard by reusing and linking what already exists, then drive the rest with tasks and plans.

Management review

Prepare the ISO 27001 management review and NIS2 management body oversight with complete inputs, logged decisions and planned follow-up.

GDPR and DPIA

Keep processing chains and their risks current, and support data protection impact assessments.

See WINGMAN on your own data

We can walk through any of these use cases with your requirements, risks and controls.

Contact Peak Defence