Shared risks get one explicit owner
The concerns most likely to fall between offices get an owner and coordinating domains — the connective tissue that keeps nine domains coherent instead of siloed.
Ungoverned AI use — including by student orgs and co-curricular programs — on institutional data or infrastructure.
Disparate impact in consequential systems affecting admissions, aid, retention, hiring, and public communications.
Autonomous systems taking actions, with human-in-the-loop requirements and agent-to-agent controls.
Training-data terms, data-use restrictions, and audit rights that outpace legal and security review.
Domain 3 (decisions about people), Domain 5 (data, security & operational AI), and Domain 8 (employment) hold most consequential systems — with Domain 6 supplying the oversight that governs them all.