Practitioner articles

Articles

Detailed explanations, worked reasoning, and practical guidance for software validation and assurance decisions.

Filter articles by category

22 resources in AI Assurance

AI Assurance

An AI reviewer can save time and still weaken a review

An assistant produces a list of protocol findings in seconds. The reviewer finishes faster. That looks promising, but time alone does not establish whether the review improved.

CSVtoCSA editorial6 min read
01

Foundation · Video and chapter

Validating AI-Enabled Systems

Identify everything that can influence the AI-assisted outcome. A model is one component. A different document parser can drop a table; a retrieval filter can select an obsolete procedure; a reviewer can accept an unsupported answer; an integration can save it to the wrong record.

CSV/CSA application6 min read
02

Foundation · Video and chapter

AI System Types and Boundaries

A predictive model estimates a value or category. A generative model produces content. A RAG application supplies retrieved material to support generation. An agent can select or execute actions through tools. These descriptions can overlap within one application.

CSV/CSA application6 min read
03

Foundation · Video and chapter

Defining Intended Use for AI

“Helps Quality” is too broad. State what the assistant does, with which information, for which users, before which decision, and with which limits. Context includes the user’s expertise, workload, available sources, and consequences of an incorrect answer.

CSV/CSA application6 min read
04

Foundation · Video and chapter

GxP Applicability for AI

GxP is shorthand for several regulated good-practice areas. Determine the applicable process and obligations rather than treating GxP as a single global rulebook.

CSV/CSA application6 min read
05

Practitioner · Video and chapter

AI Governance and Inventory

Someone must own the use, technical service, quality decision, information protection, monitoring, and incident response. One person may hold several responsibilities, but gaps should not be hidden behind a general “AI team” label.

CSV/CSA application6 min read
06

Practitioner · Video and chapter

AI Risk Assessment

“Hallucination risk” is too general to design an adequate test. Identify the unsupported statement, the use of that statement, and what could happen next.

CSV/CSA application6 min read
07

Practitioner · Video and chapter

AI Validation Evidence Plan

An evidence plan connects a claim to a test, review, analysis, or operational control. Avoid collecting only evidence that the application runs or that users like it.

CSV/CSA application6 min read
08

Practitioner · Video and chapter

AI Data Integrity and Lineage

Data lineage connects a source to its transformations and use. For an AI reviewer, that may include document version, extraction, chunking, indexing, retrieval, generation, and human disposition.

CSV/CSA application6 min read
09

Practitioner · Video and chapter

Reference Data and Expected Results

If developers repeatedly tune the prompt against the same cases and then report performance on those cases, the result may overstate performance on new work. Separate development material from evaluation material and manage access to reference answers.

CSV/CSA application6 min read
10

Practitioner · Video and chapter

AI Supplier Assessment

Review the supplied information about capabilities, limitations, version identification, changes, availability, security, data handling, and service terms. Then determine which questions remain about your application and use.

CSV/CSA application6 min read
11

Practitioner · Video and chapter

Measuring AI Performance

For issue detection, define what counts as a distinct finding and how it matches a reference issue. Precision asks how many proposed findings are correct. Recall asks how many reference issues were found. Neither measure alone establishes safe or useful deployment.

CSV/CSA application6 min read
12

Practitioner · Video and chapter

AI Test Strategy

Include representative normal work and cases designed to expose known failures. A challenge set should cover the intended use and its limits, not just unusual puzzles.

CSV/CSA application6 min read
13

Advanced · Video and chapter

Evaluating Retrieval-Augmented Generation

Check source eligibility, extraction and indexing, retrieval relevance, answer support, and user interpretation. A failure at an early stage can make later answer evaluation misleading.

CSV/CSA application6 min read
14

Advanced · Video and chapter

Critical AI Errors and Unsupported Outputs

An assistant can invent a fact, omit a qualifying condition, overstate certainty, or combine true statements into an unsupported conclusion. Review meaning at the claim level.

CSV/CSA application6 min read
15

Advanced · Video and chapter

Human Review and Oversight

The reviewer needs suitable competence, time, source access, authority, and a usable way to reject or escalate output. The interface should make the generated status clear and preserve the final human decision.

CSV/CSA application6 min read
16

Advanced · Video and chapter

AI Outputs as Controlled Records

Separate transient generation from the approved outcome. Determine which inputs, versions, outputs, review decisions, and technical details are needed for traceability, investigation, retention, and applicable obligations. Do not assume every token must be retained or that nothing matters because the output began as a draft.

CSV/CSA application6 min read
17

Advanced · Video and chapter

AI Change Control

Assess changes to prompts, retrieval, documents, parsing, embedding models, permissions, tools, UI, review instructions, and downstream use. Identify which claims the change could affect.

CSV/CSA application6 min read
18

Advanced · Video and chapter

AI Monitoring, Incidents, and CAPA

Choose indicators tied to meaningful failure: confirmed missed issues, false findings, wrong sources, unauthorized retrieval, reviewer overrides, tool failures, and unsupported use. Assign owners, review frequencies, thresholds or event triggers, and actions appropriate to the process.

CSV/CSA application6 min read
19

Advanced · Video and chapter

AI Security and Agent Permissions

A document or message can contain text that attempts to redirect the assistant. The system should distinguish data used for the task from authority to change its task, disclose information, or execute tools.

CSV/CSA application6 min read
20

Advanced · Video and chapter

AI Release Decision: Complete Case Study

A team evaluates an assistant that suggests protocol-review findings. It uses controlled requirements, generates source-linked candidates, and records reviewer dispositions. Approval and production release are outside its permissions.