Question 1

What evidence do auditors ask for on MN-1.1 A determination is made as to whether the AI system achieves its intended purpose and stated objectives and whether its development or deployment should proceed?

Accepted Answer

The recorded determination on whether the system achieves its intended purpose; The measured risk and benefit evidence the determination rested on; The decision to proceed or not, with the deciding authority named; Consideration of whether an AI system is the appropriate solution at all.

Question 2

Can MN-1.1 be evidenced continuously rather than by periodic review?

Accepted Answer

This control is evidenced by people and documents, not systems. Put the document under version control with an owner and review date, and log each review as a record with reviewer and date. Do not try to automate it.

Question 3

What is the most common gap auditors find on MN-1.1?

Accepted Answer

Determination recorded as approval with no evidence weighed

`MN-1.1` A determination is made as to whether the AI system achieves its intended purpose and stated objectives and whether its development or deployment should proceed

system holds itEvidence a system already holds

periodic reviewEvidence produced at each review

governing documentDocuments that govern the control

First move

Common gaps auditors find

Do this for your whole sheet