ISO/IEC 42001:2023 Planning

• 6.1.1 Actions to address risks and opportunities — General

  Determine AI management system risks and opportunities, plan proportionate actions, integrate them into system processes, and evaluate their effectiveness.

• 6.1.2 AI risk assessment

  Define and apply a repeatable AI risk assessment process with documented criteria that identifies, analyses, evaluates, and prioritizes risks and retains the results.

• 6.1.3 AI risk treatment

  Define and apply an AI risk treatment process that selects controls, produces a Statement of Applicability, obtains risk-owner approval, and retains treatment evidence.

• 6.1.4 AI system impact assessment

  Establish a process to assess and document the potential consequences of AI systems for individuals, groups, and societies across relevant deployment and use contexts.

• 6.2 AI objectives and planning to achieve them

  Set measurable AI objectives at relevant functions and levels, monitor and communicate them, and plan responsibilities, resources, timing, and evaluation.

• 6.3 Planning of changes

  Carry out changes to the AI management system in a planned manner.

Need help putting this into practice? See our ISO/IEC 42001 compliance services.