Regulayer™ / The 156 laws / International
ISO/IEC 42001:2023
AI management system (AIMS).
What the signed record shows
The proof is a signed, tamper-evident record. Anyone can check it, without an account, and nothing has to leave the building to make it. Evidence, not a promise.
Citation: Clause 8.1/9.1; A.6.2.2/6/8; A.9.2
In the same family
What to do about it
A signed record of which AI you used and what you checked, sealed to the exact file you deliver, made on your own machine and checkable free by anyone you send it to.
Part of the Regulayer™ proof catalogue: 156 laws and standards, one sealed engine. This page is a product description, not legal advice.
What the standard requires, section by section
ISO/IEC 42001:2023, "Information technology, Artificial intelligence, Management system". Certifiable AI management system (AIMS) standard. The clauses and Annex A controls addressed by this mapper are the ones an AIMS evidences through the OPERATION of governed AI systems (as distinct from the organisation-level policy/leadership clauses, which are management-system artefacts outside the per-inference signed record, see the HONEST SCOPE NOTE):
- Clause 8.1
- Operational planning and control (the AIMS operates the controls that meet AI requirements; records are kept as evidence).
- Clause 9.1
- Monitoring, measurement, analysis and evaluation (the AIMS is monitored on an ongoing basis).
- Annex A.6.2.2
- AI system requirements and specification (the AI system in use is identified and specified).
- Annex A.6.2.6
- AI system operation and monitoring (each operation of the AI system is governed and monitored).
- Annex A.6.2.8
- AI system recording of event logs (events are recorded over the
- AI system's life cycle).
- Annex A.9.2
- Processes for responsible use of AI systems (responsible-use
- controls
- certification/consent, are applied at use time).
Taken from the Regulayer™ entry for this instrument, which is built against the primary text.