{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T15:31:04Z","timestamp":1783783864564,"version":"3.55.0"},"reference-count":45,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2025.3647479","type":"journal-article","created":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T18:31:48Z","timestamp":1766514708000},"page":"1373-1397","source":"Crossref","is-referenced-by-count":5,"title":["From Policy to Pipeline: A Governance Framework for AI Development and Operations Pipelines"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5566-0992","authenticated-orcid":false,"given":"Talal Ashraf","family":"Butt","sequence":"first","affiliation":[{"name":"Higher Colleges of Technology, Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9004-5453","authenticated-orcid":false,"given":"Muhammad","family":"Iqbal","sequence":"additional","affiliation":[{"name":"Higher Colleges of Technology, Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3915-9153","authenticated-orcid":false,"given":"Noor","family":"Arshad","sequence":"additional","affiliation":[{"name":"Punjab Land Records Authority, Lahore, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Regulation (Eu) 2024\/1689 of the European Parliament and of the Council of 13 June 2024 Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act)","year":"2024"},{"key":"ref2","volume-title":"Artificial Intelligence Risk Management Framework (AI RMF 1.0)"},{"key":"ref3","volume-title":"Artificial Intelligence\u2013Management System","year":"2023"},{"key":"ref4","volume-title":"Artificial Intelligence\u2013risk Management","year":"2023"},{"key":"ref5","article-title":"Continuous compliance using calculated event log layers","author":"Lehto","year":"2021","journal-title":"arXiv:2110.00411"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3584318.3584854"},{"key":"ref7","article-title":"Operationalising AI governance through ethics-based auditing: An industry case study","author":"Mokander","year":"2024","journal-title":"arXiv:2407.06232"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3564139"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1080\/15265161.2020.1820101"},{"key":"ref10","doi-asserted-by":"crossref","DOI":"10.1016\/j.jss.2023.111615","article-title":"The pipeline for the continuous development of artificial intelligence models","volume":"199","author":"Steidl","year":"2023","journal-title":"J. Syst. Softw."},{"key":"ref11","first-page":"247","article-title":"Continuous quality assurance and ML pipelines under the AI act","volume-title":"Proc. IEEE\/ACM 3rd Int. Conf. AI Eng. - Softw. Eng. AI","author":"Wagner"},{"key":"ref12","volume-title":"Mlops and Genaiops for AI Workloads on Azur","year":"2024"},{"key":"ref13","volume-title":"Mlops: Continuous Delivery and Automation Pipelines in Machine Learning","year":"2024"},{"issue":"7","key":"ref14","first-page":"892","article-title":"Governance as code: Embedding policies into dataops and mlops pipelines","volume":"5","author":"Duggireddy","year":"2025","journal-title":"J. Multidisciplinary"},{"key":"ref15","first-page":"2503","article-title":"Hidden technical debt in machine learning systems","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"28","author":"Sculley"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2017.8258038"},{"key":"ref17","article-title":"From ethical principles to governed AI","volume-title":"Proc. Int. Conf. Inf. Syst. (ICIS)","author":"Sepp\u00e4l\u00e4"},{"key":"ref18","first-page":"113","article-title":"AI governance in the system development life cycle: Insights on responsible machine learning engineering","volume-title":"Proc. IEEE\/ACM 1st Int. Conf. AI Eng.-Softw. Eng. AI (CAIN)","author":"Laato"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3419764"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3262138"},{"issue":"164","key":"ref21","first-page":"1","article-title":"Improving reproducibility in machine learning research (A report from the NeurIPS 2019 reproducibility Program)","volume-title":"J. Mach. Learn. Res.","volume":"22","author":"Pineau","year":"2020"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3287560.3287596"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3458723"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2019.2942288"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00041"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.5040\/9781509932771.ch-001"},{"key":"ref27","volume-title":"Open Policy Agent (OPA) and Rego Policy Language: Documentation","year":"2025"},{"key":"ref28","volume-title":"Sentinel Policy As Code: Language and Framework","year":"2025"},{"key":"ref29","volume-title":"Supply-Chain Levels for Software Artifacts (SLSA) Specification","year":"2025"},{"key":"ref30","first-page":"1393","article-title":"in-toto: Providing farm-to-table guarantees for software supply chains","volume-title":"Proc. USENIX Secur. Symp.","author":"Torres-Arias"},{"key":"ref31","volume-title":"Sigstore: Easy Code Signing for Supply Chains","year":"2022"},{"key":"ref32","volume-title":"Software Package Data Exchange (SPDX) Specification","year":"2024"},{"key":"ref33","volume-title":"Cyclonedx Software Bill of Materials Specification","year":"2025"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2523813"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2018.2876857"},{"key":"ref36","first-page":"1321","article-title":"On calibration of modern neural networks","volume-title":"Proc. 34th Int. Conf. Mach. Learn. (ICML)","author":"Guo"},{"key":"ref37","first-page":"253","article-title":"Directly modeling missing data in sequences with RNNs: Improved classification of clinical time series","volume-title":"Proc. Mach. Learn. Healthcare Conf.","author":"Lipton"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-018-24271-9"},{"key":"ref39","volume-title":"Site Reliability Engineering: How Google Runs Production Systems","author":"Beyer","year":"2016"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.3390\/ijerph17228409"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1080\/21641846.2024.2332071"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.iccn.2023.103559"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP.2019.00042"},{"key":"ref44","volume-title":"Mlflow: Open Source Platform for the Machine Learning Lifecycle (documentation)","year":"2025"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3121545"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11311992.pdf?arnumber=11311992","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T05:37:57Z","timestamp":1767677877000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11311992\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3647479","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}