Checks / Obligations / Own it at the top
Obligation · 33 controls · 12 laws
Own it at the top
Someone senior must be accountable, roles must be clear, staff trained and policies in place.
What to put in place
Name an accountable senior owner, write the policy, assign roles and train the people involved.
Policy wording you can use
[your organisation] has a named senior person accountable for its use of AI, a written AI policy approved by leadership, clear roles and responsibilities, and training for everyone involved.
Prove it once
Describe or link the evidence that this is in place: the policy, the page, the document reference. It is sealed once and applied to all 33 controls here that take a yes or a document (the rest need their own number or date and are listed after).
Every control that asks for this
EN 18286:2026 (AI Act QMS)
- EN 18286 Cl.4 - applicable AI Act requirements identified
- EN 18286 Cl.4 - QMS scope defined
- EN 18286 Cl.5 - top management commitment
- EN 18286 Cl.5 - quality policy
- EN 18286 Cl.5 / Art.17(1)(m) - accountability framework
- EN 18286 Cl.6 - quality objectives set
- EN 18286 Cl.7 - staff competence evidenced
Agent output: compliance gates
- EU AI Act Art.16 - provider QMS referenced
- EU AI Act Art.17 - quality management policy
- ISO/IEC 42001 A.2 - AI policy present
- ISO/IEC 42001 A.3 - AI roles defined
- NIST AI RMF GOVERN-1 - policy in place
- NIST AI RMF GOVERN-2 - accountable owner named
EU AI Act
- EU AI Act Art.16 - provider obligations acknowledged
- EU AI Act Art.17 - quality management system
- EU AI Act Art.4 - staff AI literacy ensured
- EU AI Act Art.53 - training copyright policy
- EU AI Act Art.53 - training-content summary published
ISO/IEC 42001
- ISO/IEC 42001 Cl.5 - AI policy present
- ISO/IEC 42001 Cl.5 - leadership commitment
- ISO/IEC 42001 A.3 - AI roles defined
- ISO/IEC 42001 A.6 - responsible development process
GDPR (UK and EU)
NIST AI RMF
- NIST AI RMF GOVERN-1.1 - legal/reg requirements mapped
- NIST AI RMF GOVERN-2.1 - accountable owner named