Step 2. AI Policy, Roles and Objectives (5.1·5.2·6.2)

Based on the results of 1 AI Context Analysis, 4 AI System Inventory, 5 AI Risk Assessment, 6 AI System Impact Assessment, 12 Internal Audit and 15 Nonconformity and Corrective Action, and on the folders and files you designate (business plan, existing policy, objectives, KPI results), the AI policy (5.2) and AI objectives (6.2) are set.
Objectives are chosen with emphasis on effectiveness and efficiency, no more than three, and for each objective the indicator, target value and achievement plan (what will be done, resources, responsibility, completion date, evaluation method) are set. The output is one Word document in the standard format, "AI Policy and AI Objectives", and by OBJ number it is carried over by 3 Selection, 5 Risk Assessment, 7 Controls, 11 Monitoring, 14 Management Review and 16 Improvement.

Output

  • 「AI Policy and AI Objectives」 Word document: cover (document number, Rev, prepared, reviewed, approved), purpose, scope and related documents, and the AI policy (checked against 5.2 a) to d))
  • Up to 3 AI objectives (OBJ · effectiveness/efficiency · Annex C · source step ID · indicator, baseline and target · frequency · responsibility · deadline), the plan to achieve the objectives, and the link between objectives and processes
  • Monitoring and reporting, communication and awareness, candidate objectives not selected and the reasons, revision history, and items to confirm

What to do in this step, by scope of application

DevelopmentSupplyUse
Development objectives (responsible development: A.6.1.2) and development performance and quality indicatorsProvision objectives (customer notification, responsibility, quality of provision) and customer impact indicatorsUse objectives (responsible use: A.9.3) and indicators for business effect, safety and approval compliance

Next steps

Previous steps: 1 AI Context Analysis · 4 AI System Inventory · 5 AI Risk Assessment · 6 AI System Impact Assessment · 12 Internal Audit · 15 Nonconformity and Corrective Action · 14 Management Review · 16 Improvement · 11 Monitoring, Change and Revision Control · 10 Documented Information Control · The results of this step feed into: 3 AI System Selection · 5 AI Risk Assessment · 7 Control Implementation and Statement of Applicability (SoA) · 10 Documented Information Control · 11 Monitoring, Change and Revision Control · 12 Internal Audit · 14 Management Review · 16 Improvement

Run this step: select the "2 AI Policy, Roles and Objectives" step in the ICT Management System Operation guide and write.
Role division: in eiso, the plan, forms and document change proposals for this step are prepared, and on your computer you get the AI policy and AI objectives approved, publish and distribute them, and record the results (monthly or quarterly) of the objective indicators in the designated form (this material serves as the base data). At your next operation, specify the AI Management System\02_AI Policy, Roles and Objectives folder (or file) and eiso will organize, analyze and consolidate the material. Materials to specify: the business plan, existing AI policy and objectives, KPI results of the past period, and the decisions of the management review (results of previous steps are automatic through step sharing in this browser). (ICT Management System Operation Guide)

ICT Management System Operation Guide