AI governance frameworks: Compare
A learning aid, not legal advice.
| Dimension | ISO/IEC 23894:2023 Guidance on AI risk management voluntary guidance |
|---|---|
| Nature | Depth 1 of 3. A guidance standard (recommendations, not requirements), so there is nothing to certify against. ISO/IEC 23894:2023, abstract |
| Where and to whom it applies | Depth 2 of 3. Any organisation that develops, produces, deploys or uses products, systems and services that use AI, in any country. ISO/IEC 23894:2023, abstract |
| Roles addressed | Depth 1 of 3. Lists the organisations it serves (developers, producers, deployers, users) without separate duties for each. ISO/IEC 23894:2023, abstract |
| Risk approach | Depth 3 of 3. The whole standard is about AI risk: how to integrate risk management into AI-related activities and functions. ISO/IEC 23894:2023, abstract |
| Inventory and documentation | Depth 1 of 3. Under review |
| Risk or impact assessment | Depth 3 of 3. Describes how to identify, analyse and evaluate AI risks as part of the organisation's risk process. ISO/IEC 23894:2023, abstract |
| Human oversight | Depth 1 of 3. Under review |
| Transparency and notices | Depth 1 of 3. Under review |
| Data governance | Depth 1 of 3. Under review |
| Testing, robustness and security | Depth 1 of 3. Under review |
| Monitoring and incident reporting | Depth 2 of 3. Under review |
| Assurance and enforcement | Depth 0 of 3. No certification or enforcement; it can inform the risk process of a certified ISO/IEC 42001 management system. ISO/IEC 23894:2023, abstract |
| Effort to implement | Depth 1 of 3. Light to moderate: it extends an existing risk process rather than creating a new system. ISO/IEC 23894:2023, abstract (integrating risk management into AI activities) |
| Key dates | Depth 1 of 3. Published 2023-02-06 (first edition). ISO/IEC 23894:2023 page |
A learning aid, not legal advice. Where AI SENTINEL is mentioned, it supports or maps to the dimension; it does not certify anything. Dates are those the official texts state on the date shown.