# GOV-07 Personnel training

Domain: GOV Governance & Accountability · HI-AAF v1.3 · Public review · https://humanintel.net/standard/gov/gov-07

Personnel involved in agent operations complete role-appropriate training on agent security and responsible AI at least annually.

Everyone involved in the agent lifecycle, developers, operators, reviewers, risk owners, receives training appropriate to their role on agent security, responsible AI practices, and the organization's AI policies. Training is refreshed at least annually and covers the specific risks and controls relevant to the agents those personnel work with.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for GOV-07: Training records exist for all relevant personnel; training content is current and role-specific; completion rates are tracked and gaps are remediated within a documented SLA.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Training records exist for all relevant personnel.
- Training content is current and role-specific.
- Completion rates are tracked and gaps are remediated within a documented SLA.

## Framework mappings

- NIST AI RMF: GOVERN 3.1, GOVERN 3.2
- ISO/IEC 42001: 7.2, 7.3
- SOC 2 (TSC): CC1.4
- EU AI Act: Art. 9(9)
- Singapore: MAIGF Internal Governance

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, GOV-07 Personnel training. Public review edition, July 2026. https://humanintel.net/standard/gov/gov-07