Annex A

ISO/IEC 42001 / Annex A control themes

Annex A offers a reference menu of AI-specific safeguards grouped by theme, spanning policies, internal roles, resources, impact assessment, the system lifecycle, data handling, transparency to stakeholders, responsible use, and third-party arrangements.

Think of it likeA checklist of household safety measures to choose from: door locks, smoke alarms, a chore chart, labeling the cleaning chemicals, teaching the kids the rules, and vetting the babysitter.

In plain English

The organization selects from a catalog of AI safeguards, justifying which ones apply, to cover data quality, transparency, human oversight, and control of outside vendors.