← AI security in plain English

Clause 5

ISO/IEC 42001 / Leadership and AI policy

Senior leaders must own the AI program, publish a clear AI policy, and assign named roles so responsibility for AI decisions is never left vague.

Think of it likeThe parents set the household's rules on screens and safety, post them on the fridge, and make clear who decides what, instead of letting everyone freelance.

In plain English

Top management approves an AI policy, backs it with real resources, and names who is accountable, so AI choices are deliberate rather than ad hoc.