Policy
Acceptance Into Service Policy
This policy establishes a standardized framework for evaluating, approving, and transitioning new or changed systems, services, and AI solutions into operational production environments. It ensures that all deliverables meet readiness, compliance, security, and risk requirements before formal acceptance.
- Type
- Policy
- Version
- 1.0.21
- Date
- 2026-10-27
- Owner
- Chief Information Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material framework or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance and accountability
- 4. Policy statements
- 5. Framework alignment
Frameworks it maps to
- ISO/IEC 42001:2023
- ISO/IEC 27001:2022
- NIST SP 800-37 Rev. 2
- COBIT 2019
- CSA CCM v4.1
- OECD AI Principles
- EU AI Act
Related documents
- Document Architecture and Interrelationship Frameworkgovernance
- Software Evaluation, Acceptance and Lifecycle Management Standarddev-security
- Secure Development and Engineering Policydev-security
- AI Governance and Risk Frameworkai
- Risk Assessment Methodology Procedurerisk
Next
All Documents