ISO/IEC
42001
Seven clauses and a set of controls. Most people have heard the number and never seen the shape of it. GAICC certifies professionals, organisations and AI systems against it, and the summit is where its next chapter gets debated.
04 Context of the organisation
Establishes what the organisation does with AI, who it affects, and where the boundary of the management system sits.
05 Leadership
Puts accountability at the top. Governance with no senior owner is a document, not a system.
06 Planning
Risk and opportunity, set against objectives. This is where AI impact assessment becomes part of the system instead of a document filed beside it.
07 Support
The resourcing clause. Competence, awareness, communication and the documented information that makes the rest auditable.
08 Operation
Where the system meets production. Planning and control of the processes that deliver and run AI systems.
09 Performance evaluation
Monitoring, measurement, internal audit and management review. The part organisations most often skip and most often get caught on.
10 Improvement
Nonconformity and corrective action. What happens when something goes wrong, and proof it was closed out.
Alongside the clauses sits a set of reference controls covering policies, internal organisation, resources for AI systems, impact assessment, the system life cycle, data, information for interested parties, and use of AI systems. Clauses say what the system must do. Annex A is what it does it with.