The organization should use a structured, consistent approach both to carrying out AI system impact assessments and to documenting them, and the process can differ with circumstances. Internal factors to consider: the organization's context, governance, objectives, policies and procedures; its contractual obligations; and the intended use of the AI system being developed or used. External factors: applicable law, including AI uses that are prohibited; regulators' policies, guidance and decisions that shape how legal requirements are read or enforced in AI development and use; the incentives or consequences tied to the intended use; culture, tradition, values, norms and ethics bearing on AI; and the competitive landscape and trends in AI products and services. The rest of clause 5 lists elements the organization can consider in building its process.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.