Personnel that uses AI is trained on its responsible, safe and effective use. Training content and attendance is recorded.
Baseline
Applies to every organization that uses AI, regardless of size or sector.
Why
As a result of misinformation and/or misunderstanding of core AI mechanics, organizations may misjudge the risks of AI systems. Such misjudgment can lead to overly stringent rules concerning AI use, or to a lack of critical evaluation of AI output. Article 4 of the EU AI Act establishes AI literacy as an obligation for every organization using AI.
How
Employees must be informed on what is and isn't allowed, and how AI output is verified. The informing training material should be integrated into the onboarding process. For existing employees, an annual session (in which AI might be only a part) that integrates internal feedback on AI use is an excellent way of raising awareness. Acknowledgment of written policy is also sufficient. Ensure that attendance or acknowledgment is recorded.
Sources
- NIST AI RMF GOVERN 2.2
- NIST AI RMF GOVERN 4.1
- AI Act Art. 4