playbooks/infosec/tool-verdict-template

Tool Verdict Template

A defensible verdict format for AI tool approval decisions — capability, data boundary, identity model, residual risk, and the verdict line itself.

tool-verdict-template.mdTemplate · 8 min

Contents

  1. 01What this verdict captures

For: IT / InfoSec teams running AI tool reviews

PlaybooksIT / InfoSecTemplate

01

What this verdict captures

This template is structured. The working copy is being finalized by our subject-matter editors — directionally accurate today, refined shortly.

  • Capability statement — what the tool actually does, in one paragraph a non-technical reader understands.
  • Data boundary — what classes of data the tool is permitted to see, and how that boundary is enforced.
  • Identity model — how authenticated users are scoped (SSO? per-user keys? shared service account?).
  • Residual risk — what could still go wrong after controls, and what compensates.
  • Verdict — Approved / Approved with conditions / Not approved, with the conditions named.

IT / InfoSec Playbook

Practice this in the course.

The AiBI-Foundation course walks through the same prompts, with reviewed work you can take to your team.

Tool Verdict Template — IT / InfoSec Playbook — The AI Banking Institute