{"id":"VAL-001","section":"AI Usage, Spend & Value","requirement":"Measure AI usage and adoption by tool, team, function and workflow","acceptance":"Report volumes, active users, trends and the sanctioned/unsanctioned split at privacy-appropriate aggregation.","tier":"AT0–AT4","whyItMatters":"Usage is the denominator for every cost, risk and value figure.","verificationMethod":"POV","verificationTest":"Usage by tool, team and function from pilot data, at privacy-appropriate aggregation.","formerly":null,"alsoIn":[],"sort":45,"adoptionContext":"Adoption reporting spans the listed employee AI contexts so sanctioned usage does not hide shadow or agent-assisted activity; privacy limits still govern the telemetry.","mappings":[{"frameworks":["csf","soc2","iso27001"],"explanation":"Workforce usage and the sanctioned/unsanctioned split provide technology-monitoring context and inputs to security-performance and acceptable-use review. Adoption volumes and active-user counts alone are business analytics; security conclusions need relevant analysis and follow-up.","kind":"framework","references":{"csf":["DE.CM-03"],"soc2":["CC7.2"],"iso27001":["Cl. 9.1","A.5.36"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"The sanctioned and unsanctioned usage split provides policy-performance evidence when included in AI-management-system evaluation. Define the relevant objectives and evaluation method; pure activity volumes do not establish responsible-use objectives or effectiveness.","kind":"framework","references":{"iso":["Cl. 9.1"]},"relation":null,"conditions":[]}],"area":"AI Usage, Spend & Value","areaSlug":"VAL","url":"/r/VAL-001","frameworkRefs":{"ISO27001":["Cl. 9.1","A.5.36"],"ISO42001":["Cl. 9.1"],"NIST-CSF":["DE.CM-03"],"SOC2":["CC7.2"]}}