Competence of AI personnel
Description
Clause 7.2 — Persons performing AI-related work are competent based on education, training, experience; competence assured by certification or training records.
⚠️ Risk Impact
Unqualified personnel making AI design decisions creates audit-finding risk and material AI-incident risk.
🔍 How EchelonGraph Detects This
EchelonGraph's Tier 1 Cloud Scanner automatically checks for this condition across all connected cloud accounts. Violations are flagged as medium-severity findings with remediation guidance.
🔧 Remediation
Maintain role-based competence matrix: which AI roles require which knowledge. Track training completion. Adopt recognised certifications (NIST AI-RMF playbook training, ISO 42001 internal auditor training, IAPP AIGP).
💀 Real-World Attack Scenario
An organisation's AI team was strong on ML engineering but light on AI ethics. A high-stakes deployment proceeded without ethics review because no one on the team had the competence to flag the issues. Post-incident finding identified this competence gap as a root cause.
💰 Cost of Non-Compliance
Competence-gap incidents: avg 3.2× cost vs. comparable incidents with adequate competence (PwC 2024 AI Incident Cost Study).
📋 Audit Questions
- 1.Show me the competence matrix for AI roles.
- 2.What is the training completion rate?
- 3.Which staff hold AI-related certifications?
- 4.How is competence assessed beyond training completion?
⚡ Common Pitfalls
- ⛔Treating 'has an ML degree' as sufficient for all AI roles
- ⛔Training completion at sign-up only — not refreshed
- ⛔No competence assessment beyond self-report
📈 Business Value
Documented competence is audit evidence and reduces incident likelihood. Material for regulated-sector AI deployments.
⏱️ Effort Estimate
2-3 weeks for competence matrix + ongoing training tracking
EchelonGraph integrates with HRIS for training records; alerts on competence gaps per role
🔗 Cross-Framework References
Automate ISO/IEC 42001 42001-7.2 compliance
EchelonGraph continuously monitors this control across all your cloud accounts.
Start Free →