AI policy

The top-management statement that sets the organisation's direction for AI: which principles it commits to, what it will and will not build or use, how it handles risk, and who is accountable. Clause 5.2 requires the policy to fit the organisation's purpose, give a framework for AI objectives, commit to meeting requirements and to continual improvement, and be communicated; Annex A control A.2.2 repeats the requirement and A.2.3 adds alignment with other policies. Auditors expect it to be approved, dated and traceable to the controls you operate.