A.9.2 Processes for responsible use of AI systems
Defining and documenting the processes that govern how the organization uses AI systems, including approval of new uses, acceptable-use rules and oversight, for both in-house and third-party AI.

The three Annex A controls for using AI systems responsibly: processes for responsible use, objectives that guide use, and keeping use within the system's intended purpose.
Defining and documenting the processes that govern how the organization uses AI systems, including approval of new uses, acceptable-use rules and oversight, for both in-house and third-party AI.
Identifying and documenting the objectives that guide responsible use of AI systems, such as accountability, fairness or human oversight, and how use is checked against them.
Making sure each AI system is used according to its intended uses and accompanying documentation: use-case boundaries, monitoring for misuse and what happens when use drifts outside scope.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.