ISO/IEC 42001:2023 Performance evaluation

• 9.1 Monitoring, measurement, analysis, and evaluation

  Determine what to monitor and measure, the methods and timing to use, who is responsible, and how results will be analysed, evaluated, and retained.

• 9.2.1 Internal audit — General

  Conduct internal audits at planned intervals to determine whether the AI management system conforms to organizational and standard requirements and is effectively maintained.

• 9.2.2 Internal audit programme

  Plan, establish, implement, and maintain an objective internal audit programme that defines criteria and scope, selects impartial auditors, reports results, and retains evidence.

• 9.3.1 Management review — General

  Ensure top management reviews the AI management system at planned intervals for continuing suitability, adequacy, and effectiveness.

• 9.3.2 Management review inputs

  Conduct management review using the required inputs, including previous actions, contextual changes, performance trends, audit results, risks, opportunities, and improvement opportunities.

• 9.3.3 Management review results

  Document management review decisions related to improvement opportunities and required changes to the AI management system.

Need help putting this into practice? See our ISO/IEC 42001 compliance services.