Model & tool inventory register.
A structure for cataloguing every AI model and tool in finance, with owners, controls, and review dates.
Why this exists
You cannot control what you have not counted. COSO's 2026 guidance on internal control over generative AI makes the use-case inventory the first working step of AI governance, including periodic scans for shadow AI (unauthorized or ungoverned tools operating outside formal oversight). This register is that inventory, built for a finance function. It also feeds the AI risk one-pager: the posture counts on that board page come from this sheet.
What's inside
Three tabs. Instructions walks through how to use the register and what each column is for. Register is the working sheet with nineteen columns covering ownership, tiering, sensitive data, ICFR reliance, key controls, vendor attestation, version, and next review. Lookups holds the capability types, tiers, and status values so the register stays consistent as it grows.
Get the editable register
Enter your name and email and the Excel file will unlock below, ready to catalogue your own tools.
The CFO-governance cluster
This register is the source of truth behind the board one-pager and the reference inventory the policy points to:
- AI risk one-pager — the board-facing summary that pulls its posture counts from this register.
- An AI policy your audit committee can sign — the policy that requires this inventory in Section 5.
Contact me. chantal@chantalschutz.com — for fractional CFO engagements, board and audit-committee advisory, and AI-governance reviews.