Standards and Regulation: ISO / IEC
Standards and Regulation · ISO / IEC. International Organization for Standardization and International Electrotechnical Commission. This source has 7 entries admitted under this category's review policy; each links directly to the original.
Authority tiers in this category: A1.
ISO/IEC 42001:2023: AI management systems
Specifies requirements for establishing, implementing, maintaining and continually improving an AI management system, managing AI risks, opportunities, responsibilities and improvement through organizational governance.
Evidence use: Supports ISO/IEC 42001's positioning as a management system, the organizations it applies to, its requirements structure and its relationship to certification; it cannot be used to claim that all organizations are legally required to adopt it or that a given organization is certified.
Limitations: International standards are voluntary unless referenced by law, contract or procurement rules. The full normative text is subject to copyright and paid access. ISO does not certify organizations directly.
Related concepts: AI Governance and Regulation · Training Data Governance · Model Evaluation and Benchmarks
Link last checked: 2026-09-24
ISO/IEC 22989:2022: AI concepts and terminology
Establishes basic concepts and terminology for AI, providing a shared vocabulary for related standards, governance documents and technical communication.
Evidence use: Supports AI concept boundaries and formal English terminology within the ISO/IEC system; the public catalog cannot replace the specific definitions in the paid full text.
Limitations: A voluntary international standard that creates no legal obligations by itself. Full definitions should be checked against a lawfully obtained official text. Amendments in progress are not yet current content.
Related concepts: AI Governance and Regulation · Large Language Model (LLM)
Link last checked: 2026-09-24
ISO/IEC 23894:2023: guidance on AI risk management
Guides organizations in identifying and managing AI-specific risks and integrating AI risk management into existing activities, functions and organizational context.
Evidence use: Supports ISO/IEC guidance on the scope of AI risk management, organizational integration and implementation processes; guidance must not be presented as a universal mandatory obligation.
Limitations: A guidance standard with no legal force by itself. Application must take the organization's own context into account. The full text must be obtained through lawful channels.
Related concepts: AI Governance and Regulation · Model Evaluation and Benchmarks
Link last checked: 2026-09-24
ISO/IEC 42005:2025: AI system impact assessment
Guides organizations in identifying, evaluating and documenting foreseeable impacts on individuals, groups and society across the AI system lifecycle.
Evidence use: Supports what ISO/IEC 42005 assesses, where it sits in the lifecycle and how it fits with other governance standards; it cannot replace impact assessments legally required in a specific jurisdiction.
Limitations: A guidance international standard; following it does not automatically satisfy specific legal requirements. Should be implemented with reference to the actual system, context of use and affected groups. The full text must be obtained through lawful channels.
Related concepts: AI Governance and Regulation · Bias and Fairness · Human-in-the-loop (HITL)
Link last checked: 2026-09-24
ISO/IEC 42006:2025: requirements for bodies auditing and certifying AI management systems
Sets additional requirements for bodies that audit and certify ISO/IEC 42001 AI management systems, to improve audit competence, consistency and the credibility of certification.
Evidence use: Supports the scope of requirements for bodies certifying AI management systems and their audit competence; it must not be misdescribed as a certification requirement that applies directly to all AI products or ordinary organizations.
Limitations: Mainly applies to certification bodies and related accreditation bodies. Does not replace ISO/IEC 17021-1. Does not mean ISO itself certifies organizations.
Related concepts: AI Governance and Regulation · Model Evaluation and Benchmarks
Link last checked: 2026-09-24
ISO/IEC TR 24030:2024: AI use cases
Collects representative AI use cases from many fields, providing a structured reference for standards needs, application contexts and stakeholder analysis.
Evidence use: Supports the range of AI use cases collected by ISO/IEC and their standardization background; representative use cases must not be treated as evidence of market adoption or as mandatory practice.
Limitations: Technical reports are informative material. The official lifecycle shows a revision is under way. The collection of use cases is not a complete or statistical sample.
Related concepts: AI Governance and Regulation · Model Evaluation and Benchmarks
Link last checked: 2026-09-24
ISO/IEC DIS 42007: framework for conformity assessment schemes for AI systems
Provides a high-level framework for developing and operating conformity assessment and certification schemes for AI systems; currently at the ISO member enquiry stage.
Evidence use: Supports the proposed scope, target audience and current development stage of the ISO/IEC 42007 draft; draft content must not be described as an approved or current international standard.
Limitations: At the DIS 40.20 enquiry stage. Ballots and technical content may still change. Not yet published as an international standard.
Related concepts: AI Governance and Regulation · Model Evaluation and Benchmarks
Link last checked: 2026-09-24