AI Access Control: The Policy You Already Owe (Even Without an AI Law)
There is no single AI access-control law — but the moment an AI tool touches your company data, your existing ISO 27001 and SOC 2 access duties already apply. Here is what binds you, who is affected, and how to write the policy.