PSIGA Framework
A repeatable method for adopting AI with purpose and governance.
PSIGA joins three layers: Purpose, Superintelligence and Governance. The order is always the same: a real challenge, AI applied to the work and clear rules to follow it through.
Three layers, in this order.
Purpose
What for?
Before any talk of tools we define the business challenge, how it is measured and who answers for it.
What it leaves
- A defined challenge
- A metric
- An owner
Superintelligence
With what?
Your team applies AI to that challenge in its own work: assistants, automations and agents, always with a person in charge.
What it leaves
- A first initiative in motion
- Prioritized initiatives
Governance
Under which rules?
Every initiative sits in a register with its cost and its result. A person on your team approves what matters.
What it leaves
- A person who approves
- A register of cost and result
- A quarterly report
The workshop is the way into a program.
What starts in one session continues with initiatives that are measured and reviewed every quarter.
Training
A 2 to 4 hour workshop on a real challenge from your business.
Prioritized initiatives
Every initiative leaves with an owner, a metric and a next step.
Quarterly follow-up
A platform shows cost, sales or savings and progress. Every quarter you receive a report.
Governance
A person on your team approves what matters and decides what grows, what changes and what stops.
How it relates to NIST AI RMF and ISO/IEC 42001.
Two public references organize the responsible management of AI. The table shows which part of each one PSIGA touches.
NIST AI RMF 1.0
A voluntary AI risk management framework from the U.S. National Institute of Standards and Technology. It has four functions: GOVERN, MAP, MEASURE and MANAGE.
See the framework at nist.gov opens in a new tabISO/IEC 42001:2023
The international standard that sets the requirements for an AI management system inside an organization.
See the standard at iso.org opens in a new tab
| PSIGA practice | NIST AI RMF 1.0 | ISO/IEC 42001:2023 |
|---|---|---|
| Purpose: challenge, metric and owner | NIST AI RMF 1.0MAP: context and objectives. GOVERN: roles and responsibilities. | ISO/IEC 42001:2023Clause 4, context. Clause 5, leadership. 6.2, AI objectives. |
| Superintelligence: AI applied to the work | NIST AI RMF 1.0MAP: intended uses, benefits and costs. MANAGE: prioritize and act. | ISO/IEC 42001:2023Clause 7, competence and resources. Clause 8, operation. Annex A.6 and A.9, life cycle and use. |
| Governance: human approval and a register | NIST AI RMF 1.0GOVERN: policies, human oversight and accountability. | ISO/IEC 42001:20235.2, AI policy. 6.1, risks and opportunities. Annex A.2 and A.3, policies and internal organization. |
| Follow-up: cost, result and a quarterly report | NIST AI RMF 1.0MEASURE: metrics and evaluation. MANAGE: monitoring and improvement. | ISO/IEC 42001:2023Clause 9, performance evaluation. Clause 10, improvement. |
What this relationship is and what it is not.
- It is our reading of two public documents, made to guide a mid-size company.
- PSIGA is not a certification and does not replace an audit or legal advice.
- Surfing Digital holds no ISO/IEC 42001 certification and does not represent NIST or ISO.
- PSIGA covers the adoption and follow-up of initiatives. It does not cover every requirement of either reference.
Relationship reviewed in November 2026.
Tell me your business challenge.
20 minutes, free and without commitment. If there is a fit, I design the workshop for your team.