Most AI registers use one classification field: high, medium, low. This piece proposes five dimensions instead, three that combine into a score and two that can override it outright, so the reasoning behind every tier stays visible.
Most AI registers look complete and are not. This article sets out the three decisions, what counts as an AI system, what a record represents, and what classification is for, that determine whether yours reflects your actual estate.
Control selection is downstream of classification, and classification is a governance output. Where that chain is missing, what looks like a control framework is really just a control list.