Controls.
Each entry is a specific control: what it does, where it fits in the prevent, detect, correct and direct lifecycle, and which risks it addresses, graded primary, supporting or compensating. 105 controls.
Browse by list or family
9 of 105 controls shown.
| ID | Control | Family | Type |
|---|---|---|---|
| C-067 | AI competence and resourcing plan The skills, people, tooling and budget needed to build, validate, operate and oversee the organisation's AI are identified, compared with what exists, and the gaps are closed or the ambition reduced. | 12 Skills, Capability & Culture | Directive |
| C-092 | AI incident classification and playbooks The kinds of AI failure are defined in the incident process with severity criteria, each has a playbook, and responders are trained and exercised in using them. | 11 Monitoring, Assurance & Incidents | Corrective |
| C-016 | AI literacy programme Everyone who uses, relies on or makes decisions about AI receives training in what these systems are, how they fail and what the organisation's rules require. | 12 Skills, Capability & Culture | Directive |
| C-039 | Deepfake-resistant verification Identity and instruction verification never rests on voice, image or video alone, and high-value actions require confirmation through a separate, pre-agreed channel. | 10 Security & Resilience | Preventive |
| C-088 | Fallback and manual workaround A tested alternative, such as a manual process, a simpler model or a degraded mode, is ready to take over when an AI component fails or has to be withdrawn. | 10 Security & Resilience | Corrective |
| C-099 | Information for deployers and users Those who operate and use an AI system receive current, usable instructions covering its purpose, performance, limitations, the meaning of its outputs and the oversight it needs. | 08 Transparency & Explainability | Directive |
| C-103 | Role-based AI training Reviewers, developers, risk and assurance staff, approvers and front-line teams receive training specific to their AI responsibilities, with competence assessed and completion tracked. | 12 Skills, Capability & Culture | Directive |
| C-105 | Speak-up route for AI concerns Staff can raise concerns about how AI is being built or used, in confidence and without fear of reprisal, and each concern is assessed, investigated where warranted and answered. | 12 Skills, Capability & Culture | Detective |
| C-104 | Workforce impact assessment and involvement Before AI is deployed in ways that change work, its effect on roles, skills, working conditions and monitoring of staff is assessed, with the people affected and their representatives informed and heard. | 12 Skills, Capability & Culture | Directive |