Organisational policy backs every current security requirement that applies to AI model development in the organisation's own software, spanning model development, model operations and data science, whatever the source of the requirement (law, regulation, contract or standard). The organisation may extend its existing data classification policy and processes to cover AI data rather than start afresh, and documentation of a model can take the form of data cards, model cards and system cards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.