ISO/IEC 23894
ISO/IEC 23894:2023 — AI risk-management guidance standard, complementary to ISO 42001. Provides principles and processes for identifying and treating AI risks; not itself certifiable.
Related terms
- ISO 42001
ISO/IEC 42001:2023 — an international standard specifying requirements for an AI Management System (AIMS). Certifiable by third parties (like ISO 27001), it demonstrates structured governance of AI development and use across the org.
- NIST AI RMF
The US National Institute of Standards and Technology AI Risk Management Framework (v1.0 2023, Generative AI Profile 2024). Voluntary, organized around four functions — Govern, Map, Measure, Manage. Widely adopted as a common taxonomy even outside the US.
Related on this site
Where this fits
ISO/IEC 23894 is part of the Evaluation & Governance vocabulary used in the Generative AI Maturity Framework. See the full glossary for the complete set of 149 defined terms, or take the free maturity assessment to see where your organisation stands.