This step checks (verifies) that the AI works as required and suits the intended use, and the person responsible approves its use. Its purpose is to avoid using unverified AI in work. You receive the use approval record and the verification plan.
Through review, verification and validation (V&V: confirming that the AI meets the requirements and the use), it is confirmed that the AI meets the requirements and the intended use. After confirming that the controls are implemented, the approver for each grade approves use (no use before approval; for high risk, after the impact assessment is completed).
Controls for each lifecycle stage and management of training and operating datasets are also defined. This step is the evidence of implementing the Step 7 approved version (approved by top management). For each control, human oversight, legal requirement and resource and competence of the approved version, the implementation evidence is confirmed, the risk level after controls is actually rechecked, and then the use approval for each AI is judged.
If implementation and test material is specified as an external folder or file, criteria for review, verification and validation (numbering and Rev revision control) are set and judged for each AI by work area in the inventory; for AI with significant risk or subject to impact assessment, top management approves use, and for others a delegated person responsible decided in advance approves. A register of controls for each lifecycle stage and of training and operating datasets is also prepared.