Control #
E
3
.
3
Disclose extra-significant incidents to affected customers
Notify customers when an AI failure materially affects them. Disclosures must include what happened, who was impacted, and how the issue is being resolved. Define clear and consistent thresholds for when disclosure is required.
Evidence
We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.
Recommended actions
We'll recommend specific practices and actions for complying with this control.