NIST’s AI Risk Management Framework includes, under its manage function, post-deployment monitoring that captures input from users and covers appeal, override, incident response and recovery, and asks for incidents and errors to be tracked, communicated and documented. NIST’s generative AI profile adds that logging, recording and analysing incidents helps information be shared with the right people.
A one-page form is enough: date, who found it, tool, what was asked, what was wrong, impact, who was told, cause, fix, owner and closing date. Review the forms every quarter and look for patterns.