AI-IRF / D04
Incident Intake & Declaration
Operational controls for incident intake & declaration.
Domain purpose
Operational controls for incident intake & declaration.
Controls and requirements
D04-CTL-01Alert intake
Establish a repeatable and accountable capability for alert intake during AI security incident handling.
D04-CTL-02Initial validation
Establish a repeatable and accountable capability for initial validation during AI security incident handling.
D04-CTL-03Incident declaration
Establish a repeatable and accountable capability for incident declaration during AI security incident handling.
D04-CTL-04Case ownership
Establish a repeatable and accountable capability for case ownership during AI security incident handling.
Implementation use
Determine applicability using the framework scope and system context. Implementation should be proportionate to risk and supported by evidence sufficient to validate the intended outcome.