Post-Incident Review & Improvement
Operational controls for post-incident review & improvement.
Domain purpose
Operational controls for post-incident review & improvement.
Controls and requirements
D18-CTL-01Root cause analysis
Establish a repeatable and accountable capability for root cause analysis during AI security incident handling.
D18-CTL-02Lessons learned
Establish a repeatable and accountable capability for lessons learned during AI security incident handling.
D18-CTL-03Corrective action tracking
Establish a repeatable and accountable capability for corrective action tracking during AI security incident handling.
D18-CTL-04Control improvement
Establish a repeatable and accountable capability for control improvement during AI security incident handling.
Implementation use
Determine applicability using the framework scope and system context. Implementation should be proportionate to risk and supported by evidence sufficient to validate the intended outcome.