All 38 controls
ISO/IEC 42001:2023 Annex A · 9 controls
The life of an AI system
The controls about an AI system from design through to retirement: how it is specified, verified, released, monitored in use, and eventually withdrawn.
- A.6.1.2What responsible development means here, stated as objectives
- A.6.1.3Design and development processes that carry those objectives
- A.6.2.2Writing down what the AI system must do before building it
- A.6.2.3A record of how the system was designed and built
- A.6.2.4Testing that the system does what was specified
- A.6.2.5Releasing an AI system deliberately rather than by default
- A.6.2.6Watching a live AI system, and acting when it drifts
- A.6.2.7Technical documentation for the people who need to understand it
- A.6.2.8Logging what an AI system did, so it can be reconstructed
Every control here needs an applicability decision and a justification in your Statement of Applicability, including the ones you exclude. See which clauses StandardOS covers.
Decide all 9 in one pass
StandardOS pre-fills applicability and a draft justification for every Annex A control from a seven-question profile, keeps each draft marked as unreviewed until you have made it yours, and tracks implementation against each one.