{"id":"SPM-011","section":"AI Security Posture Management","requirement":"Support the AI tool approval and review lifecycle","acceptance":"Define and track unapproved versus approved AI tools and MCP servers.","tier":"AT0–AT4, AT6","whyItMatters":"Without a governed approval path, teams route around the control.","verificationMethod":"W","verificationTest":"Walk a tool or MCP server request from intake to a recorded decision.","formerly":"GOV-008","alsoIn":["audit"],"sort":10,"adoptionContext":"Managed assistants, platforms and connected-agent workflows need approval status and periodic review; status should be visible throughout the tool lifecycle.","mappings":[{"frameworks":["rmf","soc2"],"explanation":"Approved/unapproved tool and MCP-server records supply inventory context and inputs to third-party governance and permitted-use review. Tracking status alone does not establish assessment criteria, due diligence, approval authority, periodic supplier review, retirement decisions, enforcement or conformity of actual use with its intended purpose.","kind":"framework","references":{"rmf":["GOVERN 6.1","MANAGE 3.1"],"soc2":["CC9.2","CC5.3"]},"relation":null,"conditions":[]},{"frameworks":["iso27001"],"explanation":"Tool identity and approval status provide asset-register fields and, for cloud services, approval tracking within an operated cloud-use process. A status flag does not establish assessment criteria, approval authority, supplier due diligence, periodic review or retirement decisions.","kind":"framework","references":{"iso27001":["A.5.9","A.5.23"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"Approved and unapproved tool records document AI resources and their status. They do not assess supplier responsibility or establish that actual use matches the system’s intended functions.","kind":"framework","references":{"iso":["A.4.2"]},"relation":null,"conditions":[]},{"frameworks":["csf"],"explanation":"Approved and unapproved tool states provide concrete software and service-inventory attributes. Status tracking does not itself assess or manage changes and exceptions for cybersecurity risk.","kind":"framework","references":{"csf":["ID.AM-02"]},"relation":null,"conditions":[]}],"area":"AI Security Posture Management","areaSlug":"SPM","url":"/r/SPM-011","frameworkRefs":{"ISO27001":["A.5.9","A.5.23"],"ISO42001":["A.4.2"],"NIST-CSF":["ID.AM-02"],"NIST-AI-RMF":["GOVERN 6.1","MANAGE 3.1"],"SOC2":["CC9.2","CC5.3"]}}