DEFINED-SYSTEM EVIDENCE REVIEW

Defined-System AI Governance Evidence Gap Map

A fixed-scope documentary evidence review of AI governance arrangements within one defined system, workflow or bounded deployment context.

The review is conducted entirely through written correspondence. Standard fee £6,500.

Not every enquiry is accepted.

What the Gap Map is

The Defined-System AI Governance Evidence Gap Map is a written, scope-bound review of documentary records. For each governance question within the agreed scope, IGSB records whether the records submitted evidence the arrangement, and where the evidence position is partial, absent, not submitted, not applicable or outside scope. The Gap Map is a record of an evidence position. It is not certification, audit assurance, legal advice, regulatory approval or confirmation of compliance, and it does not test whether a system is safe, effective or fit for use.

How it works

Five written stages, from enquiry to issue of the Gap Map.

01

Written enquiry

You describe, in writing, the single system, workflow or bounded deployment context you wish to have reviewed and the governance question behind the enquiry. IGSB confirms whether the matter falls within the G-Series Governance Framework. Do not submit confidential, privileged, personal or operationally sensitive evidence at initial contact.

02

Defined scope and evidence request

IGSB confirms in writing the defined system, the scope boundary, the governance questions in scope and the core records required. Scope is fixed at this point. An evidence request does not constitute acceptance into any later activity.

DEFINED SCOPE

Fixed scope and standard fee

One AI-enabled system, workflow or bounded deployment context. Up to 20 core records. One consolidated written clarification round. Written correspondence only. Target delivery within ten working days of complete evidence receipt. Standard fee £6,500.

From evidence submission to issue

These stages complete the Gap Map once scope has been fixed and the core records requested.

03

Evidence submission

You submit up to 20 core records covering the defined context. The ten-working-day target begins when the evidence set is complete.

04

Consolidated clarification

Where records are unclear or incomplete, IGSB issues a single consolidated written clarification request. There is one such round.

05

Written Gap Map issued

IGSB issues the written Gap Map recording the evidence status for each governance question in scope, together with the scope boundary, the records reviewed and the limitations applying to the output.

Read the Evidence Route

Progression is determined by IGSB following written intake. Completion of one stage does not guarantee progression to another, and no stage constitutes certification, assurance or confirmation of regulatory compliance.

AGENTIC CAPABILITY

Agentic capability within the Gap Map scope

Where the defined system has agentic capability, the Gap Map may also review whether submitted documents evidence delegated authority, permitted and prohibited actions, tool, system, data and credential access, human intervention or stop routes, exception handling, logging and change re-authorisation. This is an evidence-domain review within the existing Gap Map scope, not a separate agentic AI assurance service.

Control position

Agentic Authority Evidence is an applicable evidence domain inside the Defined-System Gap Map. It is not a product, service line, audit, certification or assurance route.

What the Gap Map does not do

The Gap Map does not provide certification, audit assurance, legal advice, regulatory approval or confirmation of compliance with any legal, regulatory, contractual or statutory requirement. It does not provide technical model validation, cyber-security testing, deployment approval or implementation consultancy. It does not guarantee procurement, approval or progression of any kind. It does not establish that governance arrangements are legally sufficient, operationally effective or suitable for use. Findings are limited to the records submitted, the defined scope and the point in time at which the review was conducted.

Boundaries and exclusions

IGSB operates through written correspondence, documentary evidence review and defined scope. IGSB does not provide certification, audit assurance, legal advice, regulatory approval, confirmation of compliance with any legal, regulatory, contractual or statutory requirement, technical model validation, cyber-security testing, deployment approval or implementation consultancy.

No IGSB output guarantees procurement, approval or progression of any kind.

IGSB does not issue certification or accreditation. No certification, accreditation or assurance service exists, and none should be inferred from the framework or research material published on this site.

Evidence status language

Each governance question within the defined scope is recorded against one controlled status.

Supported

— the submitted records evidence the governance arrangement within the defined scope.

Partially Supported

— the submitted records evidence part of the arrangement; material elements remain incomplete, unclear or insufficiently traceable.

Not Evidenced

— the submitted records do not evidence the arrangement.

Not Submitted

— no record addressing the arrangement was submitted within the defined scope.

Not Applicable

— the arrangement does not apply to the defined system, workflow or deployment context.

Outside Scope

— the arrangement falls outside the agreed scope boundary and was not reviewed.

A status describes the documentary evidence position within the defined scope at a point in time. It does not confirm legal compliance, technical performance, operational effectiveness, regulatory approval or audit assurance. The absence of evidence within submitted records does not establish that an activity has never occurred; it means the activity was not evidenced within the material reviewed.

WRITTEN ENQUIRY

Enquiries

Gap Map enquiries are made in writing to enquiries@igsb-standards.org. Please include the organisation name, sector, the single AI-enabled system, workflow or bounded deployment context under consideration, the governance question you wish to have examined, and confirmation that documentary records covering that context can be provided. An enquiry does not create an engagement, a duty of care or a commitment by IGSB to accept work. A review begins only after scope, evidence requirements, boundaries, outputs, fees and engagement terms have been confirmed and accepted in writing.

Send a written enquiry