ISO/IEC 42001 Clause 6 Planning
Plan how you address AI risks and opportunities: risk assessment, risk treatment, impact assessment and objectives.
Covers
- Risks and opportunities
- AI risk assessment
- AI risk treatment
- Statement of Applicability
- AI system impact assessment
- AI objectives
- Planning of changes
Readiness question
Have you identified the risks and opportunities for the AIMS itself (not just for individual AI systems) and planned actions for them?
6 more questions for this part in the 45-line gap assessment.
Evidence an auditor will ask for
- AI risk assessment method and results
- Risk treatment plan and Statement of Applicability
- AI objectives with measures
The AI Governance Toolkit (Professional, $599) has the full 45-line ISO/IEC 42001 gap assessment, audit evidence checklist, AI policy and risk register.
Other parts of ISO/IEC 42001
- Clause 4 Context
- Clause 5 Leadership
- Clause 7 Support
- Clause 8 Operation
- Clause 9 Performance evaluation
- Clause 10 Improvement
- Annex A.2 Policies related to AI
- Annex A.3 Internal organisation
- Annex A.4 Resources for AI systems
- Annex A.5 Assessing impacts of AI systems
- Annex A.6 AI system life cycle
- Annex A.7 Data for AI systems
- Annex A.8 Information for interested parties
- Annex A.9 Use of AI systems
- Annex A.10 Third-party and customer relationships
Clause numbers and Annex A area names follow ISO/IEC 42001:2023; descriptions are our own.