Planning for ISO 42001 AI Management

ISO 42001 Clause 6 - Planning

Clause 6 is the heart of the AI management system. It sets out how the organisation determines the risks and opportunities of its AI activities, including the AI-specific risk assessment, AI risk treatment and the AI system impact assessment. It also requires AI objectives to be set and changes to the management system to be planned. The clause splits into three sub-clauses, each covered in its own article below.

Sub-clauses of ISO 42001 Clause 6

Clause 6.1 - Actions to Address Risks and Opportunities requires the organisation to determine the risks and opportunities relevant to the AI management system, conduct the AI risk assessment, plan AI risk treatment, and perform the AI system impact assessment.

Clause 6.2 - AI Objectives and Planning to Achieve Them requires the organisation to establish AI objectives at relevant functions and levels, and to plan how those objectives will be achieved.

Clause 6.3 - Planning of Changes requires changes to the AI management system to be planned and carried out in a controlled way to maintain the integrity of the management system.