Begin with a question

“Can we deliver this work?” requires capabilities, references and capacity to be considered together. Identify the parts of your company profile that support this decision. A general company summary may not answer the specific question.

Keep sources and gaps visible

Place the supporting document, relevant project experience and reviewer alongside a capability claim. When evidence is missing, leave an explicit question. An old reference and a current capacity estimate need different treatment.

Assign the review

Agree which information needs checking and who can approve it. This note presents AVOC’s suggested working approach. NIST’s voluntary AI Risk Management Framework offers a complementary resource for considering risk when using AI.

Sources and further reading

NIST · AI Risk Management Framework
Read the getting started guide