KaribuTech AI / Expertise
AI ISO Standards
Understand AI governance, risk and information security standards without confusing guidance with certification.
ISO/IEC 42001 — AI Management Systems
ISO/IEC 42001:2023 specifies organisational AI management system requirements. Define scope, responsibilities, risk and impact assessment, documented controls and continual improvement. It is not proof that an individual model is safe or accurate.
ISO/IEC 23894 — AI Risk Management
ISO/IEC 23894:2023 provides AI risk management guidance. Identify stakeholders and foreseeable harms, analyse risks, choose treatments and monitor residual risks throughout the AI lifecycle.
ISO/IEC 22989 — AI Concepts & Terminology
ISO/IEC 22989:2022 establishes shared AI concepts and terminology. Use consistent definitions in procurement, technical documentation and governance discussions; it is not a certifiable management-system requirements standard.
ISO/IEC 27001 — Information Security
ISO/IEC 27001:2022 specifies information security management system requirements. Coordinate access, supplier, incident and information-handling controls with AI governance while keeping the two management-system scopes distinct.
Control Mapping & Audit Readiness
Build a scoped AI inventory, responsibility map and evidence register. Review risk decisions and corrective actions with qualified specialists. This material does not claim KaribuTech or BluFountain certification or replace licensed standards.
Insights & research
AI ISO Standards articles
| Article | |
|---|---|
| Draft | AI ISO standards: 42001, 23894, 22989 and 27001 explained A practical scope map for AI management, risk guidance, terminology and information security. AI ISO Standards |