All 38 controls
ISO/IEC 42001:2023 Annex A · 3 controls
Policies for AI
The controls about writing down the organization's position on AI: what it will and will not use AI for, and how that position stays current as the systems change.
- A.2.2A written policy for how this organization does AI
- A.2.3Making the AI policy agree with the policies you already have
- A.2.4Reviewing the AI policy on a schedule and when things change
Every control here needs an applicability decision and a justification in your Statement of Applicability, including the ones you exclude. See which clauses StandardOS covers.
Decide all 3 in one pass
StandardOS pre-fills applicability and a draft justification for every Annex A control from a seven-question profile, keeps each draft marked as unreviewed until you have made it yours, and tracks implementation against each one.