ISO/IEC42001 Artificial Intelligence Management System

Artificial intelligence, as a disruptive technology, brings both development opportunities and unpredictable risks to human society. Humans face ethical, privacy, and security issues and challenges. Recognizing the necessity of responsible management, the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) jointly released the ISO/IEC 42001 standard for artificial intelligence management systems in December 2023. This standard provides a verifiable Artificial Intelligence Management System (AIMS) framework, within which AI systems are developed and deployed as part of the AI assurance ecosystem.
Background of ISO/IEC42001 standard: The British Standards Institution (BSI) released the BS Artificial Intelligence Management Standard in 2016, and the International Organization for Standardization (ISO) incorporated the artificial intelligence management standard into its development plan. In July 2022, the International Organization for Standardization officially released ISO/IEC 22989:2022 Information Technology - Artificial Intelligence Concepts and Terminology. This standard provides a detailed description of concepts and terminology related to the field of artificial intelligence. The standard first defines terms related to various fields of artificial intelligence, such as AI related terms, data related terms, machine learning related terms, etc. Based on the definition of terms, the standard provides a detailed explanation of concepts related to the AI field, such as "from strong artificial intelligence and weak artificial intelligence to general artificial intelligence and narrow artificial intelligence", "soft computing", "general algorithms", etc., establishing a consensus on concepts and terminology for the development of artificial intelligence management standards. In June 2023, the standard "ISO/IEC 42001 Information Technology - Artificial Intelligence - Management Systems" used for certification of artificial intelligence management systems has completed the consultation of member states' opinions. It was announced on June 8, 2023 and entered the approval stage. Finally, the ISO/IEC 42001 standard for artificial intelligence management systems was released in December.

Specifically, the standard includes the following main contents:

Organizational background: The organization should identify relevant internal and external needs, expectations, and issues, and determine the scope of the AI management system.
Leadership: Management should demonstrate leadership and commitment, ensure the establishment of AI policies and goals, integrate requirements into business processes, and ensure appropriate resources.
Planning: Organizations must develop an action plan to address the risks and opportunities of achieving their goals.
Support: It specifies the necessary requirements for resources, abilities, awareness, communication, and written information.
Operation: Organizations must have processes for developing, implementing, and maintaining AI management systems.
Performance evaluation: Established requirements for monitoring, measuring, analyzing, and evaluating AI systems, as well as internal auditing and management reviews.
Improvement: Organizations must make improvements and take corrective measures to avoid non conformities.
The standard also provides appendices that provide organizations with specific control objectives, control measures, implementation guidelines, as well as potential organizational objectives and risk sources related to AI.
Established requirements for establishing, implementing, maintaining, and continuously improving artificial intelligence management systems within the organization