Proposal to add a new section on Cross-Cutting Organisational and Assurance Risks to AI-07-06. Six risks are proposed: insufficient organisational governance for AI safety management; inadequate definition of roles, responsibilities, and competencies; lack of independence between development and verification activities; degradation of AI safety processes over time; ineffective change management for AI-related artefacts and processes; and inadequate management of AI supply-chain risks. Each risk addresses factors across the lifecycle that can influence the effectiveness of technical AI risk mitigations.