ISO/IEC 42001 / Planning and AI risk
The organization identifies what could go wrong with its AI, decides which risks matter most, plans how to treat them, and sets measurable objectives to steer the program.
The organization runs an AI risk assessment, chooses treatments for the risks it finds, and sets concrete goals so the plan can be tracked over time.