{
"id": "ISO/IEC 42001:2023",
"name": "ISO 42001 (2023)",
"logo": {
"light": "",
"dark": ""
},
"controls": [
{
"id": "4.1",
"name": "Context of the organization - Understanding the organization and its context"
},
{
"id": "4.2",
"name": "Context of the organization - Understanding the needs and expectations of interested parties"
},
{
"id": "4.3",
"name": "Context of the organization - Determining the scope of the AI management system"
},
{
"id": "4.4",
"name": "Context of the organization - AI management system"
},
{
"id": "5.1",
"name": "Leadership - Leadership and commitment"
},
{
"id": "5.2",
"name": "Leadership - AI policy"
},
{
"id": "5.3",
"name": "Leadership - Roles, responsibilities and authorities"
},
{
"id": "6.1.1",
"name": "Planning - Actions to address risks and opportunities - General"
},
{
"id": "6.1.2",
"name": "Planning - Actions to address risks and opportunities - AI risk assessment"
},
{
"id": "6.1.3",
"name": "Planning - Actions to address risks and opportunities - AI risk treatment"
},
{
"id": "6.1.4",
"name": "Planning - Actions to address risks and opportunities - AI system impact assessment"
},
{
"id": "6.2",
"name": "Planning - AI objectives and planning to achieve them"
},
{
"id": "6.3",
"name": "Planning - Planning of changes"
},
{
"id": "7.1",
"name": "Support - Resources"
},
{
"id": "7.2",
"name": "Support - Competence"
},
{
"id": "7.3",
"name": "Support - Awareness"
},
{
"id": "7.4",
"name": "Support - Communication"
},
{
"id": "7.5.1",
"name": "Support - Documented information - General"
},
{
"id": "7.5.2",
"name": "Support - Documented information - Creating and updating documented information"
},
{
"id": "7.5.3",
"name": "Support - Documented information - Control of documented information"
},
{
"id": "8.1",
"name": "Operation - Operational planning and control"
},
{
"id": "8.2",
"name": "Operation - AI risk assessment"
},
{
"id": "8.3",
"name": "Operation - AI risk treatment"
},
{
"id": "8.4",
"name": "Operation - AI system impact assessment"
},
{
"id": "9.1",
"name": "Performance evaluation - Monitoring, measurement, analysis and evaluation"
},
{
"id": "9.2.1",
"name": "Performance evaluation - Internal audit - General"
},
{
"id": "9.2.2",
"name": "Performance evaluation - Internal audit - Internal audit programme"
},
{
"id": "9.3.1",
"name": "Performance evaluation - Management review - General"
},
{
"id": "9.3.2",
"name": "Performance evaluation - Management review - Management review inputs"
},
{
"id": "9.3.3",
"name": "Performance evaluation - Management review - Management review results"
},
{
"id": "10.1",
"name": "Improvement - Continual improvement"
},
{
"id": "10.2",
"name": "Improvement - Nonconformity and corrective action"
},
{
"id": "A.2.2",
"name": "Policies related to AI - AI policy"
},
{
"id": "A.2.3",
"name": "Policies related to AI - Alignment with other organizational policies"
},
{
"id": "A.2.4",
"name": "Policies related to AI - Review of the AI policy"
},
{
"id": "A.3.2",
"name": "Internal organization - AI roles and responsibilities"
},
{
"id": "A.3.3",
"name": "Internal organization - Reporting of concerns"
},
{
"id": "A.4.2",
"name": "Resources for AI systems - Resource documentation"
},
{
"id": "A.4.3",
"name": "Resources for AI systems - Data resources"
},
{
"id": "A.4.4",
"name": "Resources for AI systems - Tooling resources"
},
{
"id": "A.4.5",
"name": "Resources for AI systems - System and computing resources"
},
{
"id": "A.4.6",
"name": "Resources for AI systems - Human resources"
},
{
"id": "A.5.2",
"name": "Assessing impacts of AI systems - AI system impact assessment process"
},
{
"id": "A.5.3",
"name": "Assessing impacts of AI systems - Documentation of AI system impact assessments"
},
{
"id": "A.5.4",
"name": "Assessing impacts of AI systems - Assessing AI system impact on individuals or groups of individuals"
},
{
"id": "A.5.5",
"name": "Assessing impacts of AI systems - Assessing societal impacts of AI systems"
},
{
"id": "A.6.1.2",
"name": "AI system life cycle - Management guidance for AI system development - Objectives for responsible development of AI system"
},
{
"id": "A.6.1.3",
"name": "AI system life cycle - Management guidance for AI system development - Processes for responsible AI system design and development"
},
{
"id": "A.6.2.2",
"name": "AI system life cycle - AI system requirements and specification"
},
{
"id": "A.6.2.3",
"name": "AI system life cycle - Documentation of AI system design and development"
},
{
"id": "A.6.2.4",
"name": "AI system life cycle - AI system verification and validation"
},
{
"id": "A.6.2.5",
"name": "AI system life cycle - AI system deployment"
},
{
"id": "A.6.2.6",
"name": "AI system life cycle - AI system operation and monitoring"
},
{
"id": "A.6.2.7",
"name": "AI system life cycle - AI system technical documentation"
},
{
"id": "A.6.2.8",
"name": "AI system life cycle - AI system recording of event logs"
},
{
"id": "A.7.2",
"name": "Data for AI systems - Data for development and enhancement of AI system"
},
{
"id": "A.7.3",
"name": "Data for AI systems - Acquisition of data"
},
{
"id": "A.7.4",
"name": "Data for AI systems - Quality of data for AI systems"
},
{
"id": "A.7.5",
"name": "Data for AI systems - Data provenance"
},
{
"id": "A.7.6",
"name": "Data for AI systems - Data preparation"
},
{
"id": "A.8.2",
"name": "Information for interested parties of AI systems - System documentation and information for users"
},
{
"id": "A.8.3",
"name": "Information for interested parties of AI systems - External reporting"
},
{
"id": "A.8.4",
"name": "Information for interested parties of AI systems - Communication of incidents"
},
{
"id": "A.8.5",
"name": "Information for interested parties of AI systems - Information for interested parties"
},
{
"id": "A.9.2",
"name": "Use of AI systems - Processes for responsible use of AI systems"
},
{
"id": "A.9.3",
"name": "Use of AI systems - Objectives for responsible use of AI system"
},
{
"id": "A.9.4",
"name": "Use of AI systems - Intended use of the AI system"
},
{
"id": "A.10.2",
"name": "Third-party and customer relationships - Allocating responsibilities"
},
{
"id": "A.10.3",
"name": "Third-party and customer relationships - Suppliers"
},
{
"id": "A.10.4",
"name": "Third-party and customer relationships - Customers"
}
]
}