Stage 1: Planning and Design
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
Raise awareness of AI security threats and develop risk assessments. Covers training and guidance for developers, system owners and senior leaders, and holistic security risk assessment of the AI system.
What this connects to
2 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Maps across to2
- External frameworkClause 6: PlanningStandardGAGE analysis, not official
Planning and design security aligns with AIMS risk planning
- External frameworkFunction: MAPGuidanceGAGE analysis, not official
Planning-stage risk assessment is MAP-function work
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.