Under active development — Content is continuously updated and improved

Home / Frameworks / ISO/IEC 23894

ISO/IEC 23894 v2023

Official ISO Store

AI - Guidance on risk management (placeholder framework)

This is a reference tool, not an authoritative source. For official documentation, visit www.iso.org.

28 All

integration — Integration (2 clauses)

6.5.2Organizational integration

6.5.3Stakeholder involvement

principles — Principles (2 clauses)

5.1Understanding AI system contexts

5.2AI risk assessment

process — Risk Management Process (8 clauses)

6.3.2.2Scope definition

6.3.2.3Context establishment

6.3.2.4Risk criteria definition

6.3.3.2Risk identification process

6.3.3.3Risk identification considerations

6.3.4.2Risk analysis process

6.3.4.3Risk analysis considerations

6.3.5Risk evaluation

support — Supporting Activities (6 clauses)

6.6.2.2Resource allocation

6.6.2.3Competence requirements

6.6.3.2Documentation requirements

6.6.3.3Information security

6.6.4.2Tool selection

6.6.4.3Technology considerations

treatment — Risk Treatment (10 clauses)

6.4.2.1Risk treatment options

6.4.2.2Risk treatment plan selection

6.4.2.3Risk treatment plan implementation

6.4.2.4Residual risk assessment

6.4.3.2Recording and reporting approach

6.4.3.4Communication planning

6.4.4.2Monitoring considerations

6.4.4.3Review considerations

6.4.4.4Continuous improvement

6.4.4.5Incident response