ISO 42001 Requirements
These clauses are the management-system requirements for an AI management system. Use them to define scope, leadership, planning, support, operation, performance evaluation, and improvement.
Context of the organization
Define why AI matters to the organisation, who is affected by it, and what parts of the business sit inside the AI management system.
Implementation and evidenceLeadership
Make senior leadership accountable for responsible AI, policy approval, role assignment, and integration with business processes.
Implementation and evidencePlanning
Plan how the organisation will assess AI risks and opportunities, set measurable objectives, and manage changes to the AIMS.
Implementation and evidenceSupport
Provide the people, skills, communication, documentation, and records needed for the AI management system to operate.
Implementation and evidenceOperation
Run the processes that control AI systems across design, acquisition, development, deployment, use, monitoring, and retirement.
Implementation and evidencePerformance evaluation
Measure whether the AIMS is working, audit it, and have leadership review performance and needed changes.
Implementation and evidenceImprovement
Correct failures, learn from incidents and audits, and continually improve the AI management system.
Implementation and evidenceISO 42001 documents, evidence, and software path
AI inventory, approved-use policy, impact assessment, supplier review, human oversight, monitoring, and incident records.