The organization should make sure that responsibilities for the assessment are assigned and made known internally. Which responsibilities are needed depends on the nature, scope and extent of the assessment and on whether an earlier one exists, and they can include: setting the scope; securing adequate resources; making sure documented information is available; working with the interested parties able to contribute (for instance people in R&D, in marketing and sales, in security and operations, in legal, and labour representatives); reporting results and other relevant information to other processes or functions; setting up approval and escalation; and making the assessment available to the relevant management reviews, in the AI management system and across the organization. Assignments should reflect the experience and competence required, the relevance of each role and the information each needs to reach, and should allow for the multidisciplinary view needed to foresee and deal with impacts over the whole life cycle (disciplines such as engineering, occupational health and safety, ethics, human rights, and the social sciences, for example psychology, sociology and anthropology).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.