Requirement
"As part of resource identification, the organization shall document information about the tooling resources utilized for the AI system."[1]
Explanation
The organization must document the tools behind each AI system — algorithms, machine learning models, data conditioning, optimization and evaluation methods, and the software and hardware used to build and deploy it. For an auditor, this record shows the organization can trace how its models were produced and reproduce or review that work.
Implementation Guidance
- Tooling resources for an AI system and particularly for machine learning, can include but are not limited to:
- algorithm types and machine learning models;
- data conditioning tools or processes;
- optimization methods;
- evaluation methods;
- provisioning tools for resources;
- tools to aid model development;
- software and hardware for AI system design, development and deployment.
- Other information: ISO/IEC 23053 provides detailed guidance on the types, methods and approaches for various tooling resources for machine learning.
References
- ISO/IEC 42001:2023 — Information technology — Artificial intelligence — Management system, A.4.4
- ISO/IEC 42001:2023 Annex B, B.4.4 (implementation guidance)
