{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-02","description":"Define and assign roles, responsibilities, and authorities for AI governance and for each AI system life-cycle stage, recording them in a maintained RACI or equivalent register. Document the human resources involved in AI development, deployment, and operation, including the competences each role requires and how competence gaps are addressed. Review assignments and competence records when systems, personnel, or obligations change.","details":{"control_category":"administrative","control_type":"preventive","domain":"AI Governance","guidance":[],"members":[{"control_id":"A.3.2","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.4.6","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"E004","coverage":"partial","delta":"define which AI system changes require formal review or approval, assign the accountable approver for each, and retain approval decisions with supporting evidence","framework":"aiuc-1","relationship":"intersects_with"}],"statement":"Define and assign roles, responsibilities, and authorities for AI governance and for each AI system life-cycle stage, recording them in a maintained RACI or equivalent register. Document the human resources involved in AI development, deployment, and operation, including the competences each role requires and how competence gaps are addressed. Review assignments and competence records when systems, personnel, or obligations change.","title":"Define AI roles, responsibilities, and competencies","unified_id":"UC-AI-02"},"id":"uc:UC-AI-02","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-02","sourceIds":["aiuc-1","iso-42001"],"sourceUrl":null,"title":"UC-AI-02 — Define AI roles, responsibilities, and competencies","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1d9a326fae818ef50d3cc13cf22d333b47f4920adc753b951baf0855b89807aa","properties":{},"sourceDetailPath":"/data/v1/records/wf-g31-74d18d48.json","sourceId":"wf:G31","targetDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","targetId":"uc:UC-AI-02","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4118ac433b2911887c4c5d66833ab147dd85769f1d4bb9f7cd941e7889a9b8c0","properties":{"rationale":"Assigning roles/responsibilities/authorities in a RACI closes the ambiguous cross-party responsibility gap so a clearly accountable owner exists at each lifecycle stage.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4966e9b62697f2a52f558561b08297eaf64b5497cba9c8ca4cd4f26d4a48f28c","properties":{"rationale":"Defining required AI-literacy/competencies and authorities equips reviewers to intervene, enabling the oversight operated by UC-16.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/risk-ai-insufficient-human-oversight-6c4f3dfa.json","targetId":"risk:ai-insufficient-human-oversight","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:76f57b42c34f613a4aee275fb51046459c8cf173f7b699c9d725d0517edfba05","properties":{},"sourceDetailPath":"/data/v1/records/wf-g1-14bc355c.json","sourceId":"wf:G1","targetDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","targetId":"uc:UC-AI-02","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a11fee8080a233a2b1efa7d05e03eb142f42f3f0c28823f090510caf114ef1a8","properties":{"control_id":"A.3.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-3-2-604cbc1c.json","targetId":"ctrl:iso-42001:A.3.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a3c0a19d17f47b02f95eef04a03fa82ea87a9f32365c23520bc72e57c364e894","properties":{"rationale":"Clarifying human vs AI responsibilities reduces mis-delegation of judgment/accountability tasks to AI.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/risk-ai-inappropriate-task-allocation-72a18be5.json","targetId":"risk:ai-inappropriate-task-allocation","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a911797c57dd6decef1320d8477b6b4e8ace304404b6fa032d618ec97b4a6290","properties":{},"sourceDetailPath":"/data/v1/records/wf-d59-b3ddf606.json","sourceId":"wf:D59","targetDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","targetId":"uc:UC-AI-02","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b1d6e2c80f69b4b757f74c96382200ee89915eb0873d0c63ab06de4399f644d5","properties":{"control_id":"E004","coverage":"partial","delta":"define which AI system changes require formal review or approval, assign the accountable approver for each, and retain approval decisions with supporting evidence","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e004-a07a7b59.json","targetId":"ctrl:aiuc-1:E004","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d6c0ffc042590f7836040b420c5c001f8ae4407640c1dd5b8de402368288d74e","properties":{"control_id":"A.4.6","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-6-579bb92f.json","targetId":"ctrl:iso-42001:A.4.6","type":"maps_to"}],"schemaVersion":1}
