ISO/IEC 23894 is an international standard published in February 2023 that offers strategic guidance to organizations across all sectors for managing risks connected to the development and use of artificial intelligence.
ISO/IEC 23894 builds upon established risk management principles:
The standard recognizes that AI systems operate on a more complex level than other technologies, resulting in a greater number of risk sources:
A key component of the standard is Annex C, which provides a comprehensive functional mapping of risk management processes across the AI system lifecycle. This serves as the primary tool for implementing risk management principles, processes, and frameworks that can be adapted to any organization.
ISO/IEC 42001:2023 is the world’s first AI management system standard, providing valuable guidance for this rapidly changing field of technology.
The standard covers essential elements of AI development and deployment, helping organizations manage risk and use AI responsibly while balancing innovation, governance, and ethics.
These ISO/IEC standards complement other frameworks like the NIST AI Risk Management Framework, providing international perspectives and approaches to AI risk management. Together, they form a comprehensive set of guidelines that organizations can use to develop responsible AI practices.