SCT

Sector-Specific & Emerging

Operational controls for sector-specific & emerging — with maturity levels, evidence requirements, and implementation guidance.

Not sure where to start? Answer 3 questions and get a tailored compliance action plan.

What applies to me? →

Filter:Low effort Medium effort High effort

Agent-relevant

Clear

1 control matching filters

SCT-007

low

Consumer and External AI Tool Acceptable Use Policy

Establish an acceptable use policy for employee and contractor use of consumer-grade and externally hosted AI tools — including public AI assistants, browser-based AI tools, and AI-enabled SaaS features — that defines permitted uses, data handling restrictions, access controls, and onboarding attestation requirements to manage shadow AI risk.