Annex A controls

A reference set of AI-specific controls, organized into nine areas (A.2 through A.10), that an organization selects from — and documents in its Statement of Applicability — based on what its own risk and impact assessments actually found.