A.2.4

Reviewing the AI policy on a schedule and when things change

Policies for AI

What it means

Review the AI policy at planned intervals and whenever the organization's AI use, obligations or risk picture changes materially, and record the outcome.

Get A.2.4 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation — alongside ISO 27001 if you run both.

Start free — no card