ISO 42001 policy
FFIEC AI Incident Response Runbook
Resilience · owned by Security Engineering · review due 2027-02-01
published
Framework
ISO 42001
Controls enforcing
6
Passing
4/6
Review due
2027-02-01
Controls that enforce this policy
RS-01Kill-switch drill executed
Fraud Detection Net · last tested 2026-09-05
RS-02Rollback plan rehearsed
Credit Risk Scoring v4 · last tested 2026-08-28
RS-03Incident post-mortem within 5 days
Wealth Robo-Advisory Pilot · last tested 2026-08-19
SC-01Prompt injection test suite
Customer Sentiment LLM · last tested 2026-09-02
SC-02Access review for model endpoints
Fraud Detection Net · last tested 2026-08-27
SC-03Secrets rotation for agent keys
Collections Outreach Agent · last tested 2026-07-30
Policy record
- Status
- published
- Category
- Resilience
- Owner
- Security Engineering
- Source
- Sample record