AI system monitoring and logging
Continuous telemetry, drift detection, and audit logging of AI system inputs, outputs, and overrides.
- detective
- monitoring
- audit-trail
What it does
Captures telemetry, drift signals, and an audit trail of inputs, outputs, and human overrides for every production AI interaction.
Where it fits
Feeds the ISO/IEC 42001 Clause 9 performance-evaluation cycle and gives incident response something to work from.
Coverage
Risks this mitigates
The risks this control addresses, ranked by effectiveness.
Excessive agency in autonomous agents
An agent is granted more permission, tool access, or autonomy than the task requires.
Sensitive information disclosure
A model surfaces training, fine-tuning, or retrieval-sourced sensitive data in its output.
Training data bias and discriminatory outcomes
Historical or sampling bias in training data is reproduced or amplified in model outputs and decisions.
Regulatory context
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| ISO/IEC 42001:2023 | Clause 9 | Performance evaluation |