All controls
A.2.2
A written policy for how this organization does AI
Policies for AI
What it means
Set out, in an approved document, the organization's intentions for developing, providing or using AI, and make it available to the people it governs.
Get A.2.2 into your SoA automatically
StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation — alongside ISO 27001 if you run both.
Start free — no card