# VAL-003: Measure spend, waste and portfolio decisions


- Area: AI Usage, Spend & Value

- Verification: Proof of value + Walkthrough
- OWASP adoption tier: Tier-independent

- URL: /r/VAL-003

**Acceptance criteria:** Report licenses, tokens, provider cost, model efficiency, redundant tools and cost per task or outcome, and produce the evidence behind a decision to scale, pause, optimize or retire a tool.

**Why it matters:** License waste and duplicate tools are often the fastest way to fund the control.

**How to verify:** Licensed versus active use for one enterprise AI tool, and the cost method explained.

**OWASP adoption context:** Portfolio cost, overlap and retirement decisions can compare AI services across adoption tiers rather than treating a tier as a measure of value.

**Mappings:**
- NIST AI RMF: GOVERN 1.7 — Cost and outcome evidence can inform a decision to retire an AI tool. The relationship is an input to decommissioning decisions; financial optimization does not establish safe retirement or treatment of residual risks.
- ISO 42001: A.4.5 — Token use and model efficiency provide resource-consumption information for identified in-scope AI services. Cost or ROI alone is insufficient, and these metrics establish neither capacity adequacy nor responsible-AI supplier alignment.