What is ISO/IEC 23894?
ISO/IEC 23894:2023 is an international standard giving guidance on risk management for organisations that develop, deploy or use AI. It adapts the ISO 31000 risk management process to AI, covering context, assessment, treatment, monitoring and recording. It is guidance, not a certifiable requirements standard.
It is often used alongside ISO/IEC 42001: the latter sets requirements for an AI management system, while 23894 helps with the risk processes inside it.
Source: ISO/IEC 23894:2023, Guidance on risk management (ANSI webstore). Last reviewed . General information, not legal advice.