2. ISO/IEC 42001 Framework for Risks and Impacts

2.1 Architecture of the AI Management System

The ISO/IEC 42001:2023 framework defines a management system as a set of interrelated or interacting elements used to establish policies, objectives, and processes for achieving those objectives. When applied to the field of AI, this definition forms the basis of the AI Management System (AIMS). The standard applies the High Level Structure common to ISO management standards, which facilitates its integration with existing frameworks such as ISO/IEC 27001 (information security), ISO/IEC 27701 (privacy), or ISO 9001 (quality).

Several organizations have already obtained, or announced that they have obtained, ISO/IEC 42001:2023 certification, including Microsoft (Microsoft 365 Copilot, Microsoft 365 Copilot Chat, and...