3.1 Policy
Explains how to establish and communicate a written policy that governs AI SBOM compliance.
Program Foundation
The stage of establishing the foundation of an AI SBOM compliance program. Covers policy, competency, awareness, and scope.
Categories:
This is stage 1 of the implementation roadmap. It defines the program’s scope (3.4), establishes policy (3.1), and secures the competency and awareness of participants (3.2, 3.3). All subsequent clauses operate on top of this foundation.
3.2 Competence
Explains how to define the roles and responsibilities of an AI SBOM compliance program and identify and assess the competence required for each role.
3.3 Awareness
Explains how to ensure that program participants are aware of the AI SBOM policy and objectives, their own contribution, and the implications of non-conformance.
3.4 Program Scope
Explains how to clearly declare the scope and limits to which the AI SBOM compliance program applies.