Control #
E
3
.
2
Review significant incidents through a structured post-incident process
For incidents meeting a defined severity threshold, conduct structured reviews to diagnose root causes, assess impact, and identify safeguards to prevent recurrence. Reviews should be timely, documented, and integrated into system improvements.
Evidence
Previous AI incident logs with root cause analysis and implemented changes
Recommended actions
We'll recommend specific practices and actions for complying with this control.