5.2 AI policy

Entry 5_2 requires an organization to establish a documented AI policy that defines the purpose, guiding principles, responsibilities and compliance requirements for AI use, aligning with legal, ethical and societal expectations. The policy must be approved by top management, communicated throughout the organization and periodically reviewed to ensure it remains effective and up-to-date.