# MON-08 Post-incident learning loop

Domain: MON Continuous Monitoring & Human Oversight · HI-AAF v1.3 · Public review · https://humanintel.net/standard/mon/mon-08

Post-incident reviews feed corrective actions into the agent's evaluation set, behavior specification, and policies, closing the learning loop.

Post-incident reviews feed corrective actions back into the agent's evaluation set (SPC-07), behavior specification (SPC-01), and organizational policies, closing the learning loop. Without this feedback mechanism, the organization is condemned to repeat the same failures. Each incident should result in at least one new test case, policy update, or specification change.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for MON-08: Post-incident review process is documented; at least one incident (or drill) has resulted in updates to the evaluation set, specification, or policies; the feedback loop is demonstrable.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Post-incident review process is documented.
- At least one incident (or drill) has resulted in updates to the evaluation set, specification, or policies.
- The feedback loop is demonstrable.

## Framework mappings

- NIST AI RMF: MANAGE 4.3
- SOC 2 (TSC): CC7.5
- EU AI Act: Art. 14(4)
- Singapore: MAIGF Incident Reporting, AI Verify Human Agency & Oversight

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites SPC-01 Written specification: https://humanintel.net/standard/spc/spc-01
- Cites SPC-07 Versioned evaluation set: https://humanintel.net/standard/spc/spc-07

## Cite this control

Human Intelligence. HI-AAF v1.3, MON-08 Post-incident learning loop. Public review edition, July 2026. https://humanintel.net/standard/mon/mon-08