oSIST prEN ISO/IEC 23894:2024

Information technology - Artificial intelligence - Guidance on risk management (ISO/IEC 23894:2023)

This document provides guidance on how organizations that develop, produce, deploy or use products, systems and services that utilize artificial intelligence (AI) can manage risk specifically related to AI. The guidance also aims to assist organizations to integrate risk management into their AI-related activities and functions. It moreover describes processes for the effective implementation and integration of AI risk management.
The application of these guidance can be customized to any organization and its context.

Informationstechnik - Künstliche Intelligenz - Leitlinien für Risikomanagement (ISO/IEC 23894:2023)

Technologies de l’information - Intelligence artificielle - Recommandations relatives au management du risque (ISO/IEC 23894:2023)

Informacijska tehnologija - Umetna inteligenca - Smernice za obvladovanje tveganj (ISO/IEC 23894:2023)

General Information

• Status: Not Published
• Public Enquiry End Date: 09-Jan-2024
• ICS: 03.100.01 - Company organization and management in general
• ICS: 35.020 - Information technology (IT) in general
• Technical Committee: UMI - Artificial intelligence
• Current Stage: 4020 - Public enquire (PE) (Adopted Project)
• Start Date: 02-Nov-2023
• Due Date: 21-Mar-2024
• Ref Project: prEN ISO/IEC 23894 - Information technology - Artificial intelligence - Guidance on risk management (ISO/IEC 23894:2023)

Standards Content (Sample)

SLOVENSKI STANDARD
oSIST prEN ISO/IEC 23894:2024
01-januar-2024
Informacijska tehnologija - Umetna inteligenca - Smernice za obvladovanje tveganj
(ISO/IEC 23894:2023)
Information technology - Artificial intelligence - Guidance on risk management (ISO/IEC
23894:2023)
Informationstechnik - Künstliche Intelligenz - Leitlinien für Risikomanagement (ISO/IEC
23894:2023)
Technologies de l’information - Intelligence artificielle - Recommandations relatives au
management du risque (ISO/IEC 23894:2023)
Ta slovenski standard je istoveten z: prEN ISO/IEC 23894
ICS:
03.100.01 Organizacija in vodenje Company organization and
podjetja na splošno management in general
35.020 Informacijska tehnika in Information technology (IT) in
tehnologija na splošno general
oSIST prEN ISO/IEC 23894:2024 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------
oSIST prEN ISO/IEC 23894:2024

---------------------- Page: 2 ----------------------
oSIST prEN ISO/IEC 23894:2024
INTERNATIONAL ISO/IEC
STANDARD 23894
First edition
2023-02
Information technology — Artificial
intelligence — Guidance on risk
management
Technologies de l’information — Intelligence artificielle —
Recommandations relatives au management du risque
Reference number
ISO/IEC 23894:2023(E)
© ISO/IEC 2023

---------------------- Page: 3 ----------------------
oSIST prEN ISO/IEC 23894:2024
ISO/IEC 23894:2023(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
  © ISO/IEC 2023 – All rights reserved

---------------------- Page: 4 ----------------------
oSIST prEN ISO/IEC 23894:2024
ISO/IEC 23894:2023(E)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Principles of AI risk management . 1
5 Framework . 5
5.1 General . 5
5.2 Leadership and commitment . 5
5.3 Integration. 6
5.4 Design . 6
5.4.1 Understanding the organization and its context . 6
5.4.2 Articulating risk management commitment . 8
5.4.3 Assigni
...