# Operationalising AI governance through ethics-based auditing: An industry case study

arXiv: https://arxiv.org/abs/2407.06232 · HTML: https://mlsanity.com/paper/2407.06232/

## Key facts

- Cited by 6 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 7 Jul 2024.

## Built on by (most cited first, 6 of 6)

- [Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives](https://mlsanity.com/paper/2506.09656/) (2025)
- [Unraveling Human-AI Teaming: A Review and Outlook](https://mlsanity.com/paper/2504.05755/) (2025)
- [Engaged AI Governance: Addressing the Last Mile Challenge Through Internal Expert Collaboration](https://mlsanity.com/paper/2604.21554/) (2026)
- [Thorns and Algorithms: Navigating Generative AI Challenges Inspired by Giraffes and Acacias](https://mlsanity.com/paper/2407.11360/) (2024)
- [Voices of Freelance Professional Writers on AI: Limitations, Expectations, and Fears](https://mlsanity.com/paper/2504.05008/) (2025)
- [LAAF: A Layered Accountability Architecture Framework for LLM Applications](https://mlsanity.com/paper/2608.27102/) (2026)

## Abstract (arXiv)

Ethics based auditing (EBA) is a structured process whereby an entitys past or present behaviour is assessed for consistency with moral principles or norms. Recently, EBA has attracted much attention as a governance mechanism that may bridge the gap between principles and practice in AI ethics. However, important aspects of EBA (such as the feasibility and effectiveness of different auditing procedures) have yet to be substantiated by empirical research. In this article, we address this knowledge gap by providing insights from a longitudinal industry case study. Over 12 months, we observed and analysed the internal activities of AstraZeneca, a biopharmaceutical company, as it prepared for and underwent an ethics-based AI audit. While previous literature concerning EBA has focused on proposing evaluation metrics or visualisation techniques, our findings suggest that the main difficulties large multinational organisations face when conducting EBA mirror classical governance challenges. These include ensuring harmonised standards across decentralised organisations, demarcating the scope of the audit, driving internal communication and change management, and measuring actual outcomes. The case study presented in this article contributes to the existing literature by providing a detailed description of the organisational context in which EBA procedures must be integrated to be feasible and effective.