CSM Framework Quick-Start Guide
A simplified 3-layer approach to AI governance. Get compliant in 8 weeks without reading 1,800 pages.
What is CSM?
CSM (Cognitive Systems Management) is the open-source framework that powers HAIEC tools. Think of it as the Linux of AI governance - free to use, widely adopted, enterprise-proven.
The full CSM framework has 6 layers and 1,800+ pages of documentation. CSM-Lite simplifies this to 3 essential layers you can implement in 8 weeks.
The 3 Layers of CSM-Lite
System Inventory
Catalog all AI systems, their purpose, risk levels, and data flows
Risk Assessment
Evaluate potential harms, compliance gaps, and mitigation strategies
Policy & Governance
Establish policies, approval workflows, and governance structures
8-Week Implementation Timeline
Discovery & Inventory
- Complete AI system inventory
- Interview system owners
- Map data flows
- Identify high-risk systems
Risk Assessment
- Conduct risk assessments
- Document compliance gaps
- Create mitigation plans
- Prioritize remediation
Policy Development
- Draft AI usage policies
- Create approval workflows
- Establish governance structure
- Get stakeholder buy-in
Implementation & Training
- Roll out policies
- Train staff
- Set up monitoring
- Launch governance committee
Common Scenarios & Requirements
Hiring AI System
- Annual bias audit
- Candidate notification
- Data retention (3 years)
- Adverse action notices
Credit Scoring AI
- Adverse action notices
- Disparate impact testing
- Model explainability
- Regular validation
Healthcare AI
- PHI protection
- Clinical validation
- Adverse event reporting
- Patient consent
Customer Service AI
- Privacy notices
- Right to opt-out
- Data minimization
- Human escalation
What's Included in CSM-Lite
Ready to Implement CSM-Lite?
CSM-Lite documentation is included in all Bootstrap pilot programs. Get started today.
Need the Full CSM Framework?
The complete 6-layer CSM framework with all 15 documents is available in the Enterprise tier ($999/month). Includes custom onboarding, dedicated support, and quarterly reviews.
Contact Sales for Enterprise Access →