The set of practices, controls, responsibilities and verification mechanisms through which an organisation governs the algorithmic systems it develops, provides or uses. Its design must keep pace with the system’s actual rate of change.