Is oversight designed in, tested before release, and still exercisable at production volume?
The oversight controls that run through the system's life. This theme covers risk assessment, operational control, verification and validation, live monitoring, logging and disengagement.
What good looks like
A V&V plan, operating procedures, drift monitoring, logs and a tested disengagement mechanism.
What goes wrong
Oversight designed for a pilot, drift not monitored, and a kill switch that has never been pulled.
The 8 units in this theme
| Ref | Oversight unit | Theme | Held citation | Evidence |
|---|---|---|---|---|
| OH-05 | AI risk assessment | Life cycle | ISO/IEC 42001:2023, 6.1.2 | 3 |
| OH-11 | Operational planning and control | Life cycle | ISO/IEC 42001:2023, 8.1 | 3 |
| OH-24 | Verification and validation | Life cycle | ISO/IEC 42001:2023, A.6.2.4 | 3 |
| OH-25 | Operation and monitoring | Life cycle | ISO/IEC 42001:2023, A.6.2.6 | 3 |
| OH-26 | Event logs | Life cycle | ISO/IEC 42001:2023, A.6.2.8 | 3 |
| OH-36 | Approval of the assessment | Life cycle | ISO/IEC 42005:2025, 5.11 | 3 |
| OH-46 | Oversight processes defined and assessed | Life cycle | NIST AI RMF 1.0, MP-3.5 | 3 |
| OH-47 | Disengage or deactivate the system | Life cycle | NIST AI RMF 1.0, MN-2.4 | 3 |
Work the theme, not the document
Open one unit, answer its three questions, and attach the evidence it names. Then move to the next. The theme is complete when every row has a named owner, a dated artefact and a recorded answer to the questions. That is a higher bar than a policy, and a lower bar than a certification.
The paid kit carries the same rows with the owner, due date and status columns already in place, and a dated plan that sequences the six themes across the 120 days to the planning date.
The human oversight kit, USD 799 one off.
The 47-unit register, the 142-item evidence index, the 120-day plan and the gap questions, as PDF, CSV and XLSX. Five labelled rows are free on the specimen page.