Roles and responsibilities concerning AI are assigned and documented.
Baseline
Applies to every organization that uses AI, regardless of size or sector.
Why
As AI is used by many different departments in different workflows and types of work, it becomes widely incorporated into the daily business. This may lead to a situation in which AI is unowned. As a result, there may be no clear accountability or department/person who can be reached for clarification, questions or expertise.
How
The organization should name a known department/team/individual as responsible for AI deployment and management within the organization and as the point of contact for questions and concerns. Typically this will be a well-known department or individual with an existing role, although some larger organizations may choose to appoint a person with AI as their sole responsibility.
Sources
- NIST AI RMF GOVERN 2.1
- NIST AI RMF GOVERN 3.2
- ISO/IEC 42001 A.3.2
- ISO/IEC 42001 A.3.3