The organization's position on AI, including the goals, opportunities and limits for its use, is documented.
Baseline
Applies to every organization that uses AI, regardless of size or sector.
Why
For artificial intelligence to be adopted effectively in an organization, there must be an organization wide policy and understanding of how the organization views AI in the first place. Without a stated position, departments and teams may decide independently. One team might restrict AI while other staff don't consistently know what data is and isn't allowed to be processed by AI. From this initial decision, the rest of AI policies will flow.
How
A concise document works better than a large manual that employees won't read. The best policy is one that is easy to remember and to find. It may be added onto existing policy documents; but ensure it is communicated clearly to the whole organization when the organization's position on AI is formulated.
Sources
- NIST AI RMF GOVERN 1.2
- NIST AI RMF MAP 1.3
- ISO/IEC 42001 A.2.2
- ISO/IEC 42001 A.2.3
- ISO/IEC 42001 A.2.4
- ISO/IEC 42001 A.9.3