The AI governance board establishes clear pathways for employees to report non-compliance with the policy to the board; the agency seeks to remedy non-compliance, and where it cannot, the board notifies the Agency Head and the Accountable Official, who must detail it in the agency's attestation. Agencies should tell NSW GovAI where they lack resources or expertise to implement AI governance and assurance, and are strongly encouraged to fold compliance with the policy into internal audit plans and governance, risk and compliance processes.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.