All 38 controls
ISO/IEC 42001:2023 Annex A · 3 controls
Using AI responsibly
The controls about using AI responsibly once it is running: what it may be used for, who may use it, and what oversight sits between the system and a decision that affects somebody.
- A.9.2Rules for how this organization itself uses AI
- A.9.3What responsible use means here, stated as objectives
- A.9.4Using a system for what it was built for
Every control here needs an applicability decision and a justification in your Statement of Applicability, including the ones you exclude. See which clauses StandardOS covers.
Decide all 3 in one pass
StandardOS pre-fills applicability and a draft justification for every Annex A control from a seven-question profile, keeps each draft marked as unreviewed until you have made it yours, and tracks implementation against each one.