Before using an AI system with a material impact on service delivery, a firm must have assessed, and written down, whether AI is the best tool for the job, considering at least the services provided, the nature of the task, alternative tools, environmental and stakeholder impact information for all tools considered, data risks, and the risk of erroneous or biased output and its consequences; a periodically reviewed written policy or standing statement per service may serve.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.