AI Regulation and Risk Readiness

The European artificial intelligence regulation entered into force on 1 August 2024, 20 days after its publication in the Official Journal. On 30 August 2024 not one of its substantive provisions has become applicable, and the earliest application date is 2 February 2025. Entry into force and applicability are different things. Treating them as the same is the costliest error in this subject. Six days before that, the United States standards institute published a profile addressing generative artificial intelligence risks as a companion to its existing risk management framework. It is voluntary, cross-sectoral, and organised around risks and suggested actions. It imposes nothing. This paper builds a working crosswalk between the two without claiming they are equivalent. One creates legal duties on a fixed timetable; the other offers a method. What makes the crosswalk worth doing is that a single evidence system can serve both, and most of the work an organisation must do in the next 18 months is evidence work it would benefit from regardless.