3Decide

ISO 42001Impact Assessment

Impact Assessment

Purpose

Assessment of consequences of an AI system on individuals, groups and society, feeding risk treatment.

Role

ISO/IEC 42001 Clause 6.1.4 and Annex A.5 require a process for assessing and documenting potential consequences of AI systems on individuals, groups and society. This is the largest AI-specific semantic hole against Ten Factor and has no ISO/IEC 27001 counterpart: twins can hold risk, but not an impact-assessment model aligned with ISO/IEC 42005 concepts.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• AI System
• Party Register
• Sensitive Activity
• Intended and foreseeable use

Links downstream

• Risk Assessment
• Control
• Evaluation Log
• Management Review

Related factors

• Govern Sensitive Activities
• Build a Governance Twin
• Evidence by Default
• Governance is Version Controlled

References

• ISO/IEC 42001 Analysis — Clause 6.1.4 and Annex A.5