The International Organization for Standardization (ISO) published ISO/IEC 42001:2023 on Dec. 18. This standard establishes a framework for organizations involved in developing, providing, or using artificial intelligence (AI)-based products or services. The full text of the standard can be found for purchase here. We can also expect that ISO/IEC 42001:2023 will be included in agreements between vendors and buyers similar to other National Institute of Standards and Technology (NIST) and ISO standards.

The FAQ section on the ISO website describes the new standard as follows:

An AI management system, as specified in ISO/IEC 42001, is a set of interrelated or interacting elements of an organization intended to establish policies and objectives, as well as processes to achieve those objectives, in relation to the responsible development, provision or use of AI systems.

The ISO/IEC 42001 standard offers organizations the comprehensive guidance they need to use AI responsibly and effectively, even as the technology is rapidly evolving. Designed to cover the various aspects of artificial intelligence and the different applications an organization may be running, it provides an integrated approach to managing AI projects, from risk assessment to effective treatment of these risks.

We will provide additional analysis of this new standard in coming blogs.