AISM Statement of Applicability

The AISM Statement of Applicability is the control-selection and applicability record for AI-enabled services governed under AI Service Management.

AISM requires a disciplined way to connect AI controls to actual workforce services. Without a statement of applicability or equivalent control-selection record, the organization cannot explain why a control exists, why a control was excluded, or how AI risk treatment is connected to human governance obligations.

Within WSM, this topic connects AISM AI Risk Assessment, AISM AI Risk Treatment, AISM Control Evidence and Audit Model, Control, Evidence Object, Audit Evidence, and Management Review. It makes control applicability auditable and advisor-readable.

A Management Advisor should flag services where the statement of applicability is missing, stale, unsupported by evidence, inconsistent with risk assessment, or silent about HRSM and DISM inheritance.