Phase 3 — Controls (phased)

ISO control points: match, soft scope, implementation defaults. Phased approach — optional AI.

Approach: Phased · Switch approach ISO control points: match, soft scope, implementation defaults. In phased mode you work worksheets and prompts for this phase. Affirm AI enrichment only when you want it; otherwise Skip / continue manually.

Workflow diagram

Phased Phase 3 — Controls workflow

In this approach

ServerOrchestrates steps, validates structured answers, commits the phase artifact.
YouAnswer, edit worksheets, review, and accept when ready.
AIOptional at consent gates — Skip stays free.

Cost

Manual / Skip free. Affirmed enrichment billable (1 AI token per gate). See billing. Prev: Phase 2 — Architecture · Next: Phase 4 — Threats · Phased hub