ISO/IEC 4200165
Annex A, Control A.10.2 · Annex A, Control A.10.3 · Annex A, Control A.10.4 · Annex A, Control A.2.2 · Annex A, Control A.2.3 · Annex A, Control A.2.4 · Annex A, Control A.3.2 · Annex A, Control A.3.3 · Annex A, Control A.4.2 · Annex A, Control A.4.3 · Annex A, Control A.4.4 · Annex A, Control A.4.5 · Annex A, Control A.4.6 · Annex A, Control A.5.2 · Annex A, Control A.5.3 · Annex A, Control A.5.4 · Annex A, Control A.5.5 · Annex A, Control A.6.1.2 · Annex A, Control A.6.1.3 · Annex A, Control A.6.2.2 · Annex A, Control A.6.2.3 · Annex A, Control A.6.2.4 · Annex A, Control A.6.2.5 · Annex A, Control A.6.2.6 · Annex A, Control A.6.2.7 · Annex A, Control A.6.2.8 · Annex A, Control A.7.2 · Annex A, Control A.7.3 · Annex A, Control A.7.4 · Annex A, Control A.7.5 · Annex A, Control A.7.6 · Annex A, Control A.8.2 · Annex A, Control A.8.3 · Annex A, Control A.8.4 · Annex A, Control A.8.5 · Annex A, Control A.9.2 · Annex A, Control A.9.3 · Annex A, Control A.9.4 · ISO/IEC 42001:2023 Clause 10.1 · ISO/IEC 42001:2023 Clause 10.2 · ISO/IEC 42001:2023 Clause 4.1 · ISO/IEC 42001:2023 Clause 4.2 · ISO/IEC 42001:2023 Clause 4.3 · ISO/IEC 42001:2023 Clause 4.4 · ISO/IEC 42001:2023 Clause 5.1 · ISO/IEC 42001:2023 Clause 5.2 · ISO/IEC 42001:2023 Clause 5.3 · ISO/IEC 42001:2023 Clause 6.1.1 · ISO/IEC 42001:2023 Clause 6.1.2 · ISO/IEC 42001:2023 Clause 6.1.3 · ISO/IEC 42001:2023 Clause 6.1.4 · ISO/IEC 42001:2023 Clause 6.2 · ISO/IEC 42001:2023 Clause 6.3 · ISO/IEC 42001:2023 Clause 7.1 · ISO/IEC 42001:2023 Clause 7.2 · ISO/IEC 42001:2023 Clause 7.3 · ISO/IEC 42001:2023 Clause 7.4 · ISO/IEC 42001:2023 Clause 7.5 · ISO/IEC 42001:2023 Clause 8.1 · ISO/IEC 42001:2023 Clause 8.2 · ISO/IEC 42001:2023 Clause 8.3 · ISO/IEC 42001:2023 Clause 8.4 · ISO/IEC 42001:2023 Clause 9.1 · ISO/IEC 42001:2023 Clause 9.2 · ISO/IEC 42001:2023 Clause 9.3
Requirements in this framework
- Acquisition of data
- Actions to address risks and opportunities — General
- AI management system
- AI objectives and planning to achieve them
- AI policy
- AI policy
- AI risk assessment
- AI risk assessment
- AI risk treatment
- AI risk treatment
- AI roles and responsibilities
- AI system deployment
- AI system impact assessment
- AI system impact assessment
- AI system impact assessment process
- AI system operation and monitoring
- AI system recording of event logs
- AI system requirements and specification
- AI system technical documentation
- AI system verification and validation
- Alignment with other organizational policies
- Allocating responsibilities with third parties
- Assessing AI system impact on individuals or groups
- Assessing societal impacts of AI systems
- Awareness
- Communication
- Communication of incidents
- Competence
- Continual improvement
- Customers
- Data for development and enhancement of AI systems
- Data preparation
- Data provenance
- Data resources
- Determining the scope of the AI management system
- Documentation of AI system design and development
- Documentation of AI system impact assessments
- Documented information
- External reporting
- Human resources
- Information for interested parties
- Intended use of the AI system
- Internal audit
- Leadership and commitment
- Management review
- Monitoring, measurement, analysis and evaluation
- Nonconformity and corrective action
- Objectives for responsible development of AI systems
- Objectives for responsible use of AI systems
- Operational planning and control
- Planning of changes
- Processes for responsible AI system design and development
- Processes for responsible use of AI systems
- Quality of data for AI systems
- Reporting of concerns about AI systems
- Resource documentation
- Resources
- Review of the AI policy
- Roles, responsibilities and authorities
- Suppliers of AI system components
- System and computing resources
- System documentation and information for users
- Tooling resources
- Understanding the needs and expectations of interested parties
- Understanding the organization and its context