Risk Management for AI
Provides guidance on how to integrate AI-specific risks into broader organizational risk frameworks.
ISO 23894 is a guidance standard. It offers recommendations rather than auditable requirements, so no accredited body can certify an organisation to ISO 23894. Any claim of "ISO 23894 certification" should be treated with caution.
ISO/IEC 23894 is an international standard that provides guidance on managing risks specifically related to artificial intelligence. It helps organizations identify, assess, and treat AI-specific risks within their existing risk management processes.
The standard builds on the principles of ISO 31000 (Risk Management) and tailors them to address the unique challenges posed by AI systems, including data quality risks, model bias, lack of transparency, and unintended consequences of automated decision-making.
By adopting ISO/IEC 23894, organizations can ensure that AI deployments are governed by robust risk management practices that protect stakeholders and build trust in AI-driven outcomes.
There is no certification to pursue, but an experienced consultant can help you apply ISO 23894 alongside the management system standards you are certified to. Reading the published document is the best starting point.
This page summarises ISO 23894 (current published edition). Always confirm the detail against the published document.