Control #

E

3

.

4

Promise customers to follow your AI incident response plan

Include a contractual or policy-level commitment that your organization will follow its AI incident response process, including disclosing serious incidents to affected customers. This ensures customers have enforceable expectations when things go wrong.

Evidence

We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.

Recommended actions

We'll recommend specific practices and actions for complying with this control.

Provide feedback on this control