Organizational Baseline Policy

Data artifactGovernance & ComplianceSafety, Security & Governancearc:OrganizationalBaselinePolicy

An enforceable policy set applying to every agent regardless of function or department, codifying legal obligations, regulatory mandates and core security principles.

Responsibility. Establishes the foundational constraints that all agent actions must satisfy.

Also known as: Baseline policy tier

Direct neighbourhood (hover for relationship types)

Relationships

configures structural

Action Policy Engine Ch10.5

constrains control

Departmental Policy Ch10.5

Design guidance

SHOULD codify legal, regulatory and core security requirements that lower policy tiers inherit and may only extend.

Classification

Patterns: Risk-based policy tieringPolicy inheritance
Quality attributes: Transparency and accountability (NIST AI RMF: accountable and transparent)Security (ISO/IEC 25010 | NIST AI RMF: secure and resilient)
Risks mitigated: PII transmission to external email addresses
Frameworks & regulations: GDPR

Sources

Ch10.5: T. Nguyen, "Human-over-the-Loop," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 10.5. ISBN: 9798244538229.