MANAGE-2 — Manage 2: Sustain and Monitor Deployed Systems
17 requirements in the Manage 2: Sustain and Monitor Deployed Systems function
MANAGE 2.2Mechanisms are in place and applied to sustain the value of deployed AI systems
MG-2.2-001Compare GAI system outputs against pre-defined organization risk tolerance, guidelines, and
MG-2.2-002Document training data sources to trace the origin and provenance of AI- generated content
MG-2.2-003Evaluate feedback loops between GAI system content provenance and human reviewers, and update
MG-2.2-004Evaluate GAI content and data for representational biases and employ techniques such as
MG-2.2-005Engage in due diligence to analyze GAI output for harmful content, potential misinformation, and
MG-2.2-006Use feedback from internal and external AI Actors, users, individuals, and communities, to assess
MG-2.2-007Use real-time auditing tools where they can be demonstrated to aid in the tracking and validation
MG-2.2-008Use structured feedback mechanisms to solicit and capture user input about AI- generated content
MG-2.2-009Consider opportunities to responsibly use synthetic data and other privacy enhancing techniques in
MANAGE 2.3Procedures are followed to respond to and recover from a previously unknown risk when it is
MG-2.3-001Develop and update GAI system incident response and recovery plans and procedures to address the
MANAGE 2.4Mechanisms are in place and applied, and responsibilities are assigned and understood, to
MG-2.4-001Establish and maintain communication plans to inform AI stakeholders as part of the deactivation
MG-2.4-002Establish and maintain procedures for escalating GAI system incidents to the organizational risk
MG-2.4-003Establish and maintain procedures for the remediation of issues which trigger incident response
MG-2.4-004Establish and regularly review specific criteria that warrants the deactivation of GAI systems in