ctl-008
Staff attest to acceptable-use policy before AI assistant access.
- Type
- PREVENTIVE
- Automation
- SEMI_AUTOMATED
- Frequency
- ANNUAL
- Owner
- Digital Strategy
Control Design Assessment (CDA)
Procedures evaluating whether the control is designed adequately.
No design-assessment procedures defined yet.
Control Operating Effectiveness (COE)
Procedures evaluating whether the control operated over the testing period.
No operating-effectiveness procedures defined yet.
Linked risks
- Ungoverned generative AI outputmitigation 1
- AI copilot data leakagemitigation 2
Framework mappings & latest test
HRS-15GRC-09
Latest test:PARTIAL2026-02-28