Control · C-067 · Skills, Capability & Culture
AI competence and resourcing plan
The skills, people, tooling and budget needed to build, validate, operate and oversee the organisation's AI are identified, compared with what exists, and the gaps are closed or the ambition reduced.
- Control type
- Directive
- Risks addressed
- 6
- Audience
- Board · Heads-of
- Frameworks
- Annex A.4 · Clause 7 · GOVERN 2
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-10
What it does
It matches what the organisation deploys to what it can look after. The plan sets out the capabilities required across the three lines, from model validation and monitoring to audit and legal, measures them against current capacity, and commits resources to the difference. A senior executive owns it with the support of human resources. It is drawn up with the AI strategy, tested at each significant approval and refreshed annually.
How to implement it
- List the roles that AI depends on in each line, and the skills each needs.
- Assess current capacity, including reliance on single individuals and on suppliers.
- Require every business case to fund operation, monitoring and review as well as build.
- Close gaps by training, recruitment or bought-in expertise, with dates.
- Plan succession for key roles and keep knowledge documented.
- Report the position, and slow adoption where capacity is short.
Evidence it operates
Design: a capability assessment and resourcing plan approved at executive level. Operation: budget lines for operating and overseeing AI; training and recruitment records against the plan; business cases showing running costs; evidence of a deployment deferred for lack of capacity.
Where it fits
Set alongside strategy and tested through operation. It is the primary control for inadequate AI resourcing and competence, supports weak independent assurance of AI by equipping the second and third lines, and sits beside the AI literacy programme, which addresses general awareness.
Limits
The skills are scarce and contested, so a plan can be sound and still go unfilled. Capability bought from outside leaves when the contract ends unless knowledge is transferred. Plans count posts more easily than competence. Where the gap cannot be closed, the honest response is to do less, and that is the option most often left out.
Risks this mitigates
Primary mappings
- Deskilling and loss of expertise Medium
- Identifies the expertise that must be retained and how. Reliance on AI erodes the human expertise needed to check its output, to cover for it when it fails and to train the next generation.
- Inadequate AI resourcing and competence Medium
- Identifies the skills needed and closes the gaps. AI systems are adopted without the people, skills, tooling and budget needed to build, oversee and operate them safely.
Supporting mappings
- AI literacy gap in the deploying organisation Medium
- Plans the skills the organisation needs. Staff who use, rely on or make decisions about AI systems do not understand what those systems can and cannot do, so they misuse or over-trust them.
- No fallback for AI failure High
- Keeps people able to perform the manual process. When an AI component fails or has to be withdrawn, no manual process, simpler model or degraded mode is ready to take over.
- Weak independent assurance of AI Medium
- Gives assurance functions the skills to challenge. Second-line review and internal audit do not cover AI with sufficient skill or frequency, so control failures persist undetected.
- Workforce displacement and job quality Medium
- Plans reskilling. AI deployment removes roles or makes the remaining work worse, without assessment, involvement of the people affected or a plan for transition.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| ISO/IEC 42001:2023 | Annex A.4 | Resources for AI systems Resources for AI. |
| ISO/IEC 42001:2023 | Clause 7 | Support Resources and competence. |
| NIST AI Risk Management Framework (AI RMF 1.0) | GOVERN 2 | Accountability structures and trained, empowered teams Trained teams. |
How to cite
Axiom Verity (2026). AI competence and resourcing plan. Reference Library, C-067. https://axiom-verity.com/controls/ai-competence-and-resourcing-plan. Reviewed 2026-11-10.
Found an error or a better source? Report a correction.