Control #
E
3
.
2
Conduct post-incident reviews for all significant AI incidents
For any AI incident above a defined severity threshold, conduct a structured post-incident review to document causes, assess impact, and identify changes to prevent recurrence.
Evidence
Previous AI incident logs with root cause analysis and implemented changes
Recommended actions
We'll recommend specific practices and actions for complying with this control.