A.9.2

Rules for how this organization itself uses AI

Using AI responsibly

What it means

Define the processes governing the organization's own use of AI systems, including systems it did not build.

Get A.9.2 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation — alongside ISO 27001 if you run both.

Start free — no card