The document discusses the structure and key aspects of ISO 42001, which specifies requirements for managing AI systems. It covers the foreword, scope, terminology, requirements, documentation, and risk management considerations of the standard.
The document discusses the structure and key aspects of ISO 42001, which specifies requirements for managing AI systems. It covers the foreword, scope, terminology, requirements, documentation, and risk management considerations of the standard.
The document discusses the structure and key aspects of ISO 42001, which specifies requirements for managing AI systems. It covers the foreword, scope, terminology, requirements, documentation, and risk management considerations of the standard.
The document discusses the structure and key aspects of ISO 42001, which specifies requirements for managing AI systems. It covers the foreword, scope, terminology, requirements, documentation, and risk management considerations of the standard.
Download as PPTX, PDF, TXT or read online from Scribd
Download as pptx, pdf, or txt
You are on page 1of 22
The Anatomy of ISO 42001
SCSD Lecture 1 Feb 2024
The Foreword • No responsibility, liability, etc • Users take the risk • Who is a ”professional”? • What is “correct application”? How should it help us? It should help with processes What does this mean? • The first point relates to requirements on the process: why are you using AI at all? What is the aim of the organization? Who are the stakeholders? • Risk management is an essential aspect of any process management system (and there is a generic approach to it that gets specialized). • The next point is a list of “concerns” around others – can you think of others? • The final point raises the issue of the ”AI supply chain” what does it look like and who is involved in creating and deploying models. The scope tells you what the standard is for What is the scope telling you • What: the standard sets out to do: “This documents specifies the requirements….” • Who: the standard sets out who should be interested in using the standard: “intended for use by an organization providing or using products or services that utilize AI systems.” Other standards, and terminology Terminology Main body of the standard Requirements Explanatory notes Referring to Standards • BS EN ISO/IEC 22989:2023 • Information technology — Artificial intelligence — Artificial intelligence concepts and terminology Testable? Documentation Organizational perspective Organisational Policy Planning Risk Summary • Although we have looked at ISO 42001 this lecture has started to look at the general structure of management/quality standards. • Standards generally avoid legally binding commitments • Standards often sit inside closely related standards • Standards attempt to have focused scope and refer to other standards. • Standards requirements should be testable • Standards often mandate documentation of policies, assessments, plans, … • Risk is a key concept in planning