Develop, implement and disclose AI governance and risk management policies grounded in a risk-based approach, including privacy policies and mitigation measures, in particular for organisations developing advanced AI systems. Code of Conduct detail: put in place organisational mechanisms to develop, disclose and implement risk management and governance policies, including accountability and governance processes to identify, assess, prevent and address risks across the lifecycle where feasible; disclose privacy policies covering personal data, user prompts and system outputs where appropriate; apply a risk management framework across the lifecycle and update policies regularly; and establish policies, procedures and training so that staff know their duties and the organisation's risk management practices.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.