Controls
One control, many legal duties
A law says what must be true. A control is what an organisation operates to make it true, and the evidence is how it proves it. Each control below is linked to every recorded duty it satisfies or supports, across every jurisdiction, so the work done once can be counted once.
Original catalogue. Standards are cited by clause number only; the official text of a duty decides whether a control is enough.
- Controls
- 3
- original catalogue
- Evidence types
- 7
- from the evidence taxonomy
-
Policy Executive sponsor for AI · annual
AI governance policy and accountability structure
Gives the organisation a single approved statement of how it will develop, buy and use AI, and names the people who are answerable for it, so that every other AI control has a mandate and an owner.
- Duties
- 16
- Binding
- 9
- Jurisdictions
- 11
Australia, European Union, Singapore, India, Nepal, South Korea and 5 more
Evidence: AI policy, Board or executive approval of the AI policy, AI governance forum minutes…
-
Policy Head of AI safety · annual
Frontier model safety and security framework
Commits a developer of the most capable general-purpose models to a published, regularly reviewed description of how it identifies catastrophic and systemic risks, decides when a model is safe to train further or release, and protects model weights.
- Duties
- 9
- Binding
- 9
- Jurisdictions
- 3
European Union, South Korea, California (United States)
Evidence: Published frontier safety framework, Dangerous-capability evaluation report, Threshold notification to an authority…
-
Policy Quality lead · annual
Quality management system for AI development and supply
Binds the organisation's AI processes into one documented, audited management system so that compliance is repeatable across products rather than reinvented for each one.
- Duties
- 3
- Binding
- 3
- Jurisdictions
- 1
European Union
Evidence: AI quality management system manual, Internal audit of the AI management system, Management review minutes
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.