GAISSF / D6
Governance, Accountability & Human Oversight
Domain purpose
Controls and requirements
D6-CTL-01Human-In-The-Loop For High-Risk Actions
Prevent catastrophic autonomous actions.
D6-CTL-02Audit Trail Completeness
Enable forensic investigation + regulatory compliance.
D6-CTL-03Ai Model Card Completeness
Enable transparency + regulatory conformity.
D6-CTL-04Ai Incident Response Readiness
Reduce breach impact (MTTC from days to hours).
D6-CTL-05Model Deprecation & Decommissioning
Prevent zombie AI systems with stale access.
D6-CTL-06Third-Party Ai Vendor Governance
Manage supply chain risk.
D6-CTL-07Ai Resilience & Business Continuity
Ensure AI availability under stress.
Implementation use
Determine applicability using the framework scope and system context. Implementation should be proportionate to risk and supported by evidence sufficient to validate the intended outcome.