Build, operate and continuously improve AI governance, including organisational processes to identify, assess and address risks across the whole lifecycle (design, development, provision, implementation), such as monitoring and evaluation mechanisms involving management, appropriate disclosure of related information and education and training, so as to manage AI risk at an acceptable level while maximising benefits. The guideline notes that existing IT governance processes can be reused, and that the Hiroshima AI Process reporting framework and a management system based on international standards such as ISO/IEC 42001 are ways to manage AI risk, disclosure of which is expected to raise corporate value.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.