Clause 8
ISO 42001 DATA MODEL

Operation

Description

Defines operational requirements for AI system planning, development, and deployment including risk assessment, impact assessment, and data management throughout the AI lifecycle.

Requirements

  • 8.1 Operational planning and control
  • 8.2 AI system risk assessment
  • 8.3 AI system impact assessment
  • 8.4 Data for AI systems

Implementation Guidance

8.1 Operational Control

Establish procedures for AI system development, testing, deployment, and change management with documented approval gates and rollback capabilities.

8.2-8.3 Risk and Impact Assessment

Conduct system-specific risk assessments covering technical failures and algorithmic harms; evaluate societal, environmental, and individual impacts before deployment.

8.4 Data Management

Implement data quality controls, provenance tracking, and privacy protections for training and operational data throughout the AI lifecycle.

Evidence Requirements

Operational procedures and work instructions

AI system risk assessments

Impact assessment reports

Data management plans

Approval records