ISO/IEC 42001:2023 — Information technology — Artificial intelligence — Management system
The world's first certifiable AI management system standard (AIMS), developed by ISO/IEC JTC 1/SC 42. It specifies requirements for establishing, implementing, maintaining and continually improving an AI management system within any organization that provides or uses products or services utilizing AI systems. It exists to give organizations an auditable, ISO-harmonized-structure framework for responsible AI development and use, analogous to ISO 27001 for information security.
Publisher
ISO/IEC
Published
18 Dec 2023
Added
yesterday
DOI
—
Key Findings
- Follows the ISO harmonized structure (context, leadership, planning, support, operation, performance evaluation, improvement), making it certifiable by accredited bodies and integrable with ISO 27001/9001 management systems.
- Requires AI risk assessment and AI risk treatment processes, plus a distinct AI system impact assessment considering effects on individuals, groups and society (operationalized by companion standard ISO/IEC 42005).
- Annex A provides 38 controls across 9 objectives (e.g. policies for AI, AI system lifecycle, data management, information for interested parties, third-party/supplier relationships); Annex B gives implementation guidance.
- Applies to organizations of any size or sector, covering both providers and deployers of AI systems; edition 1.0, 51 pages.
Methodology Notes
International consensus standard developed by ISO/IEC JTC 1/SC 42 (Artificial intelligence). Certifiable management system standard (requirements, 'shall' language), unlike guidance documents such as ISO/IEC 23894 and 42005. Full text paywalled; official catalogue/webstore pages are the canonical public record.
Sources
IEC Webstore — ISO/IEC 42001:2023 (official co-publisher catalogue page) (primary)
ISO catalogue page — ISO/IEC 42001:2023 (blocks automated fetch; resolves in browser) (18 Dec 2023)
Archived snapshot (Wayback Machine) — preserved against link rot
Tags
Cite This
APA
ISO/IEC (2023). ISO/IEC 42001:2023 — Information technology — Artificial intelligence — Management system. ISO/IEC. https://webstore.iec.ch/en/publication/90574