AI-IRF / D01
Preparation & Governance
Operational controls for preparation & governance.
Domain purpose
Operational controls for preparation & governance.
Controls and requirements
D01-CTL-01Response authority
Establish a repeatable and accountable capability for response authority during AI security incident handling.
D01-CTL-02AI incident policy
Establish a repeatable and accountable capability for ai incident policy during AI security incident handling.
D01-CTL-03Response plan
Establish a repeatable and accountable capability for response plan during AI security incident handling.
D01-CTL-04Exercise programme
Establish a repeatable and accountable capability for exercise programme during AI security incident handling.
Implementation use
Determine applicability using the framework scope and system context. Implementation should be proportionate to risk and supported by evidence sufficient to validate the intended outcome.