{"id":"GRD-017","section":"Runtime Guardrails","requirement":"Provide sensible policy defaults and no-code authoring","acceptance":"Editable baseline policies and recommended settings without regex or specialist rule writing.","tier":"AT0–AT4, AT6","whyItMatters":"Policy work should not require regex skills.","verificationMethod":"W","verificationTest":"Show the default policy set and author a new policy without writing patterns.","formerly":"POL-006","alsoIn":[],"sort":27,"adoptionContext":"Policy-authoring usability and defaults are governance-platform concerns across adoption tiers, rather than properties of a particular AI deployment pattern.","mappings":[{"frameworks":["csf","rmf","iso","soc2","iso27001"],"explanation":"Editable baseline policies and recommended settings help turn AI-risk decisions into documented security and acceptable-use rules. Easy authoring is an input to establishing and deploying policy; template availability does not establish approval, communication, review or enforcement.","kind":"framework","references":{"csf":["GV.PO-01"],"rmf":["GOVERN 1.4"],"iso":["A.2.2"],"soc2":["CC5.3"],"iso27001":["A.5.1","A.5.10"]},"relation":null,"conditions":[]}],"area":"Runtime Guardrails","areaSlug":"GRD","url":"/r/GRD-017","frameworkRefs":{"ISO27001":["A.5.1","A.5.10"],"ISO42001":["A.2.2"],"NIST-CSF":["GV.PO-01"],"NIST-AI-RMF":["GOVERN 1.4"],"SOC2":["CC5.3"]}}