ARCHETYPAL
CGRCC / rule

Define the business value of AI use

AIR-260ECC7519 · LEGACY_PUBLISHED · source version acfa461478a2370b

AI governance owners should define the business value of AI use.

Meaning & implementation context

Catalog material requires organizational applicability review. Reported support, approval and maturity are statements from the source, not current enforcement verification.

Source Release
2026-10-03.2
Adopted
No
Machine Executable
No

An AI system or employee activity involves the business value of AI use. Confirm the actor and source conditions before using this template.

Provide a traceable control for the action: define the business value of AI use.

Open original AIR rule card ↗

Source-reported relationships

1 associations retained with their original context.

SUPPORTED BY SOURCE REQUIREMENT · REQ-9ea1e6cfe18133c933b5@156e49fdf41528a7

SOURCE_REPORTED_REVIEW_REQUIRED

{
  "sourceKey": "nist-ai-rmf-1@eeff9d803ee6",
  "locator": "Map 1.4"
}
Inspect target record ↗

Owner interpretation review

Append a catalog review decision. The source record remains immutable.

Owner sign-in

Versioned CGRCC JSON
{
  "key": "AIR-260ECC7519@acfa461478a2370b",
  "id": "AIR-260ECC7519",
  "version": "acfa461478a2370b",
  "kind": "rule",
  "lifecycle": "LEGACY_PUBLISHED",
  "title": "Define the business value of AI use",
  "statement": "AI governance owners should define the business value of AI use.",
  "family": "Governance",
  "body": {
    "legacy": {
      "id": "AIR-260ECC7519",
      "version": 2,
      "title": "Define the business value of AI use",
      "text": "AI governance owners should define the business value of AI use.",
      "topic": "Governance",
      "intent": "define the business value of ai use",
      "status": "candidate",
      "semanticStatus": "human-validation-required",
      "variants": [
        {
          "sourceId": "nist-ai-rmf-1",
          "control": "Map 1.4",
          "sourceVersion": "AI RMF 1.0 (2023)",
          "url": "https://nvlpubs.nist.gov/nistpubs/ai/nist.ai.100-1.pdf",
          "actor": "AI governance owners",
          "modality": "should",
          "action": "define",
          "object": "the business value of AI use",
          "condition": "AI lifecycle and deployment context; voluntary framework outcome",
          "exception": null,
          "timing": null,
          "authority": "voluntary",
          "jurisdiction": "United States",
          "checkedAt": "2026-10-03",
          "status": "interpretation-needs-review",
          "examples": {
            "meetsRule": "AI governance owners follows the recommendation to \"define\" for the business value of AI use within these conditions: AI lifecycle and deployment context; voluntary framework outcome.",
            "doesNotMeetRule": "AI governance owners omits the recommended action \"define\" for the business value of AI use. This is a recommendation gap, not by itself a statutory violation.",
            "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
          }
        }
      ],
      "situation": "An AI system or employee activity involves the business value of AI use. Confirm the actor and source conditions before using this template.",
      "purpose": "Provide a traceable control for the action: define the business value of AI use.",
      "examples": {
        "meetsRule": "AI governance owners follows the recommendation to \"define\" for the business value of AI use within these conditions: AI lifecycle and deployment context; voluntary framework outcome.",
        "doesNotMeetRule": "AI governance owners omits the recommended action \"define\" for the business value of AI use. This is a recommendation gap, not by itself a statutory violation.",
        "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
      },
      "evidence": [
        "Dated record of the action",
        "Responsible actor and approval, where required",
        "Applicable source edition and scope"
      ],
      "enforcement": {
        "mode": "policy-template",
        "adapter": "Human or authorized system adapter required",
        "machineExecutable": false
      },
      "limitations": [
        "A rule card is an interpretation aid, not an applicability determination.",
        "Equivalent intent does not make different source obligations interchangeable."
      ],
      "createdAt": "2026-10-03",
      "updatedAt": "2026-10-03"
    },
    "sourceRelease": "2026-10-03.2",
    "adopted": false,
    "machineExecutable": false
  },
  "versions": [
    {
      "version": "acfa461478a2370b",
      "key": "AIR-260ECC7519@acfa461478a2370b"
    }
  ],
  "provenance": [],
  "relationships": [
    {
      "id": "MAP-0fa093ff384d0c015e7eb9b9",
      "from": "AIR-260ECC7519@acfa461478a2370b",
      "to": "REQ-9ea1e6cfe18133c933b5@156e49fdf41528a7",
      "kind": "SUPPORTED_BY_SOURCE_REQUIREMENT",
      "status": "SOURCE_REPORTED_REVIEW_REQUIRED",
      "body": {
        "sourceKey": "nist-ai-rmf-1@eeff9d803ee6",
        "locator": "Map 1.4"
      },
      "fromKeys": [
        "AIR-260ECC7519@acfa461478a2370b"
      ],
      "toKeys": [
        "REQ-9ea1e6cfe18133c933b5@156e49fdf41528a7"
      ],
      "resolution": "RESOLVED_REFERENCE_REVIEW_REQUIRED"
    }
  ]
}
Back to CGRCC Registry