ISO/IEC 23894:2023Published

Information technology — Artificial intelligence — Guidance on risk management

Technologies de l’information — Intelligence artificielle — Recommandations relatives au management du risque

Abstract / scope

This document provides guidance on how organizations that develop, produce, deploy or use products, systems and services that utilize artificial intelligence (AI) can manage risk specifically related to AI. The guidance also aims to assist organizations to integrate risk management into their AI-related activities and functions. It moreover describes processes for the effective implementation and integration of AI risk management.

The application of this guidance can be customized to any organization and its context.