Intake and risk-tiering procedure

What it is

The Intake and risk-tiering procedure is the artifact that satisfies RUAIH focus area 3 — Risk and bias reduction — at the control level.

Who signs it

The AI governance committee chair.

A document without a signature is a draft. An assessor is checking that someone with authority put their name to it.

What an assessor asks for

The written rule, and the tier assigned to every entry in the register.

What goes in it

• The intake form — what a requester must supply before review
• The two tiering axes: proximity to a clinical decision, and consequence of error
• Tier definitions with worked examples at each boundary
• What each tier requires: validation depth, monitoring cadence, review frequency
• Who assigns the tier and who can appeal it
• Re-tiering triggers

The most common failure

Tiering by vendor size or contract value rather than clinical proximity. A cheap tool that touches triage outranks an expensive one that schedules rooms, and procurement instinct gets this exactly backwards.

Where this sits

See the RUAIH crosswalk for how this control maps across CHAI’s playbooks and the NIST AI RMF.