Module v1.0 · Required
Govern and Map a Healthcare Operations AI Use Case
Define purpose, authority, data, affected people, clinical boundaries, and accountable roles before choosing a tool.
Apply the Govern and Map functions to a bounded healthcare-operations use case and identify where clinical authority, privacy, security, and human review must remain explicit.
Purpose, authority, and accountable roles
Make the intended benefit, owner, reviewer, and decision boundary explicit.
Start with a specific operational purpose such as drafting a scheduling message, organizing an internal procedure, retrieving an approved policy excerpt, or summarizing a fictional workflow. Name the business owner, operational reviewer, privacy and security partners, clinical or patient-safety partner when relevant, affected people, escalation owner, and person who can pause or retire the use case.
NIST's Govern function establishes policy, accountability, roles, resources, and expectations that remain in place as the use case, vendor, data, or risk changes.
- Purpose and expected benefit are specific
- Permitted and prohibited uses are written down
- Owner, reviewer, escalation owner, and stop authority are named
- Clinical judgment and patient-facing consequences have an accountable owner