4Operate

ISO 27001Incident

ISO 42001Incident

Incident

Purpose

A security or AI event the management system must classify, decide on, communicate and learn from.

Role

ISO/IEC 27001 Annex A and ISO/IEC 42001 expect incidents to be handled and, where required, communicated to affected stakeholders. Evaluation and enforcement logs record governance decisions; they are not an incident case file.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• Governed Resource
• AI System
• Party Register
• Threat

Links downstream

• Corrective Action
• Communication Requirement
• Reporting Obligation
• Enforcement Log
• Audit Log

Related factors

• Evidence by Default
• Continuous Governance
• Context In, Decisions Out

References

• ISO/IEC 27001 Analysis — Annex A.5.24
• ISO/IEC 42001 Analysis — Annex A.8 / incident communication
• ISO/IEC 27001 Guidance Catalog (iso27001-A.5.24)