Controls.

Each entry is a specific control: what it does, where it fits in the prevent, detect, correct and direct lifecycle, and which risks it addresses, graded primary, supporting or compensating. 105 controls.

Browse by list or family

11 of 105 controls shown.

IDControlFamilyType
C-023Approval gates for high-impact agent actions Before an agent takes an action above a defined impact threshold, or one that cannot be reversed, a designated person reviews the exact action and approves or rejects it.09 Human Oversight & ContestabilityPreventive
C-019Automated decision-making safeguards Significant decisions taken with no meaningful human involvement are identified, and each has the safeguards the law requires: information, a chance to make representations, human intervention and a means to contest.09 Human Oversight & ContestabilityDirective
C-102Contestability and appeals process People affected by an AI-supported decision can challenge it and have it reviewed afresh by someone with the authority, information and independence to change it.09 Human Oversight & ContestabilityCorrective
C-078Escalation to a human Automated channels offer a prompt, unobstructed route to a person, available on request and triggered automatically by defined signals, with the conversation handed over.09 Human Oversight & ContestabilityPreventive
C-097Explanations for affected individuals People subject to an AI-supported decision receive a meaningful explanation of what was decided, the main reasons in their case and how to challenge it.08 Transparency & ExplainabilityDirective
C-090Feedback and complaints channel for AI Users and affected people can report a problem with an AI system easily, and reports are triaged, linked to the system concerned and analysed for patterns.11 Monitoring, Assurance & IncidentsDetective
C-094Human override and stop mechanism A designated person can pause, override or shut down an AI system at any time through a tested mechanism, with the authority to do so settled in advance.09 Human Oversight & ContestabilityCorrective
C-002Human-in-the-loop review Consequential AI outputs and decisions are reviewed by a competent person, with the time, information and authority to change them, before they take effect.09 Human Oversight & ContestabilityPreventive
C-101Reviewer effectiveness testing Override rates, review times and seeded test cases are used to confirm that human reviewers actually detect and correct the system's errors.09 Human Oversight & ContestabilityDetective
C-103Role-based AI training Reviewers, developers, risk and assurance staff, approvers and front-line teams receive training specific to their AI responsibilities, with competence assessed and completion tracked.12 Skills, Capability & CultureDirective
C-077Vulnerable customer safeguards Automated journeys detect indicators of vulnerability, adapt what they do, and route the customer to appropriate human support, with the disclosure recorded.07 Fairness & Customer OutcomesPreventive