Control · C-067 · Skills, Capability & Culture

AI competence and resourcing plan

The skills, people, tooling and budget needed to build, validate, operate and oversee the organisation's AI are identified, compared with what exists, and the gaps are closed or the ambition reduced.

Control type
Directive
Risks addressed
6
Audience
Board · Heads-of
Frameworks
Annex A.4 · Clause 7 · GOVERN 2
Responsible AI domain
Reviewed
2026-11-10

What it does

It matches what the organisation deploys to what it can look after. The plan sets out the capabilities required across the three lines, from model validation and monitoring to audit and legal, measures them against current capacity, and commits resources to the difference. A senior executive owns it with the support of human resources. It is drawn up with the AI strategy, tested at each significant approval and refreshed annually.

How to implement it

  • List the roles that AI depends on in each line, and the skills each needs.
  • Assess current capacity, including reliance on single individuals and on suppliers.
  • Require every business case to fund operation, monitoring and review as well as build.
  • Close gaps by training, recruitment or bought-in expertise, with dates.
  • Plan succession for key roles and keep knowledge documented.
  • Report the position, and slow adoption where capacity is short.

Evidence it operates

Design: a capability assessment and resourcing plan approved at executive level. Operation: budget lines for operating and overseeing AI; training and recruitment records against the plan; business cases showing running costs; evidence of a deployment deferred for lack of capacity.

Where it fits

Set alongside strategy and tested through operation. It is the primary control for inadequate AI resourcing and competence, supports weak independent assurance of AI by equipping the second and third lines, and sits beside the AI literacy programme, which addresses general awareness.

Limits

The skills are scarce and contested, so a plan can be sound and still go unfilled. Capability bought from outside leaves when the contract ends unless knowledge is transferred. Plans count posts more easily than competence. Where the gap cannot be closed, the honest response is to do less, and that is the option most often left out.

Risks this mitigates

Primary mappings

Deskilling and loss of expertise Medium
Identifies the expertise that must be retained and how. Reliance on AI erodes the human expertise needed to check its output, to cover for it when it fails and to train the next generation.
Inadequate AI resourcing and competence Medium
Identifies the skills needed and closes the gaps. AI systems are adopted without the people, skills, tooling and budget needed to build, oversee and operate them safely.

Supporting mappings

AI literacy gap in the deploying organisation Medium
Plans the skills the organisation needs. Staff who use, rely on or make decisions about AI systems do not understand what those systems can and cannot do, so they misuse or over-trust them.
No fallback for AI failure High
Keeps people able to perform the manual process. When an AI component fails or has to be withdrawn, no manual process, simpler model or degraded mode is ready to take over.
Weak independent assurance of AI Medium
Gives assurance functions the skills to challenge. Second-line review and internal audit do not cover AI with sufficient skill or frequency, so control failures persist undetected.
Workforce displacement and job quality Medium
Plans reskilling. AI deployment removes roles or makes the remaining work worse, without assessment, involvement of the people affected or a plan for transition.

Framework and clause references

FrameworkClauseTitle
ISO/IEC 42001:2023Annex A.4Resources for AI systems Resources for AI.
ISO/IEC 42001:2023Clause 7Support Resources and competence.
NIST AI Risk Management Framework (AI RMF 1.0)GOVERN 2Accountability structures and trained, empowered teams Trained teams.

How to cite

Axiom Verity (2026). AI competence and resourcing plan. Reference Library, C-067. https://axiom-verity.com/controls/ai-competence-and-resourcing-plan. Reviewed 2026-11-10.