Creating and Managing Policies for the Use of Generative AI

URN: TECDT80951
Business Sectors (Suites): IT(Data Science)
Developed by: ODAG
Approved on: 2025

Overview

This standard outlines the competencies required to develop and implement policies governing the use of generative AI (GenAI) within organisations. It focuses on establishing guidelines that promote ethical use, data security, and compliance with regulations. The standard also includes the importance of stakeholder engagement and continuous review of policies to adapt to evolving technologies.

This standard is intended for professionals involved in policy development and management related to GenAI.


Performance criteria

You must be able to:

  1. Evaluate existing organisational practices to determine areas requiring specific policies to maintain ethical, secure and compliant GenAI usage.
  2. Engage with stakeholders to gather insights on relevant policy areas, risks and concerns related to the use of GenAI.
  3. Develop clear, actionable GenAI policies that prioritise ethical practices, data security, regulatory compliance, and organisational alignment.
  4. Disseminate GenAI policies to employees and relevant stakeholders and provide tailored training to support their effective implementation and compliance.
  5. Conduct periodic reviews of GenAI policies to adapt to evolving technologies and stakeholder needs.
  6. Monitor and assess the effectiveness of GenAI policy implementation to measure outcomes and identify areas for improvement.

Knowledge and Understanding

You need to know and understand:

  1. National and global GenAI specific regulations, guidelines and governance frameworks.
  2. Key industry and sector-specific regulations and standards relevant to GenAI usage.
  3. Privacy, data sovereignty, and intellectual property issues specifically related to GenAI outputs and usage.
  4. Industry best practice for ethical GenAI deployment.
  5. Principles of effective GenAI policy development and communication within organisations.
  6. Best practices in drafting clear, enforceable, and adaptable GenAI policies that cater to both technical and non-technical stakeholders.
  7. How to integrate GenAI policies into existing organisational governance structures, including cross-departmental alignment and communication protocols.
  8. Techniques for engaging stakeholders to provide comprehensive and inclusive GenAI policy creation and implementation.
  9. Best practices for designing adaptable policies that effectively address emerging challenges and technological advancements in GenAI.
  10. Techniques for conducting risk assessments specific to GenAI usage, including potential reputational, operational, and legal risks.
  11. Policy impact assessment methods to evaluate how GenAI policies affect organisational processes and risk exposure.
  12. Techniques for developing training programs and resources to support employee understanding and compliance with GenAI policies.
  13. Effective communication strategies to promote policy adherence, such as using case studies and real-life examples of GenAI related ethical or compliance issues.
  14. Ethical considerations surrounding GenAI, including bias, transparency, and accountability.
  15. Strategies for fostering collaboration across departments to ensure GenAI policies are effectively integrated into all organisational processes.
  16. Methods for monitoring and evaluating the effectiveness of GenAI policy implementation and compliance with relevant frameworks.

Scope/range


Scope Performance


Scope Knowledge


Values


Behaviours


Skills


Glossary


Links To Other NOS


External Links


Version Number

1

Indicative Review Date

2028

Validity

Current

Status

Original

Originating Organisation

ODAG Consultants Ltd.

Original URN

TECDT80951

Relevant Occupations

Information and Communication Technology Professionals

SOC Code

2133

Keywords

Artificial Intelligence, AI, Generative AI, Policy, Policies, GenAI