ISO/IEC 23894:2023
Framework – ISO/IEC 23894:2023

ISO/IEC 23894:2023 5.4.1: Understanding the organization and its context

ISO 31000:2018, 5.4.1 applies, and Table 2 lists further external-context factors for an organization working with AI: legal requirements, AI-specific ones included; ethical guidance on designing and using AI and automated systems issued by governments, regulators, standards bodies, civil society, academia and industry groups; sector-specific AI guidance and frameworks; technology developments across the fields of AI; the social and political consequences of putting AI into use, informed by the social sciences; how stakeholders see AI, which opacity or bias can colour; and what stakeholders expect in the way of AI-based products. Internally, the context adds the organization's own AI capability, data, culture and values, and the contracts and network dependencies its AI systems rely on.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 26 controls across 20 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • ISO-39001-4.1 Understanding the organization and its context
  • ISO39001-4.1 Understanding the Organization and Its Context
  • ISO-41001-4.1 Understanding the organization and its context
  • ISO41001-4.1 Understanding the Organization and Its Context
  • ISO-50001-4.1 Understanding the organization and its context
  • 4.1 Understanding the organization and its context

ISO 56002 · 2 controls

  • ISO-56002-4.1 Understanding the organization and its context
  • ISO56002-4.1 Understanding the organization and its context

ISO/IEC 27003:2017 · 2 controls

  • 27003-4.1 Understanding the Organization and Its Context
  • ISO27003-4.1 Understanding the organization and its context
  • AS9100D-4.1 Understanding the Organization and Its Context

ISO 14001:2015 · 1 control

  • 4.1 Understanding the organization and its context

ISO 14004:2016 · 1 control

  • 4.1 Understanding the organization and its context

ISO 22000:2018 · 1 control

  • 4.1 Understanding the organization and its context

ISO 22301:2019 · 1 control

  • 4.1 Understanding the organization and its context
  • ISO-22313-4.1 Understanding the organization and its context

ISO 27701:2019 · 1 control

  • 5.2.1 Understanding the organization and its context

ISO 31000:2018 · 1 control

  • 5.4.1 Understanding the organization and its context

ISO 37001:2016 · 1 control

  • 4.1 4.1 Understanding the organization and its context
  • ISO-37002-4.1 Understanding the organization and its context

ISO 37301:2021 · 1 control

  • 4.1 Understanding the organization and its context

ISO 45001:2018 · 1 control

  • 4.1 Understanding the organization and its context

ISO 55001:2014 · 1 control

  • 4.1 Understanding the organization and its context

ISO 9001:2015 · 1 control

  • 4.1 Understanding the organization and its context

ISO/IEC 42001:2023 · 1 control

  • 4.1 Understanding the organization and its context

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Framework – ISO/IEC 23894:2023

Query this from an agent

The graph holds this control, the 26 it maps to, and the evidence behind each claim, over MCP and REST.