ISO/IEC 23894:2023
Framework – ISO/IEC 23894:2023

ISO/IEC 23894:2023 5.4.3: Assigning organizational roles, authorities, responsibilities and accountabilities

Authorities, responsibilities and accountabilities for every relevant risk management role should be assigned and communicated at all levels (ISO 31000:2018, 5.4.3); for AI that means defining who is accountable for each AI system across its life cycle, including the roles that own data, models, deployment and human oversight, and making sure the people assigned have the AI-specific competence the role needs.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 20 controls across 18 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 19011:2018 · 2 controls

  • 5.5.5 Assigning responsibility for an individual audit to the audit team leader
  • 6.4.2 Assigning roles and responsibilities of guides and observers

ISO 56002 · 2 controls

  • ISO-56002-5.4 Organizational roles, responsibilities and authorities
  • ISO56002-5.3 Organizational roles, responsibilities and authorities
  • AS9100D-5.3 Organizational Roles, Responsibilities, and Authorities

ISO 14001:2015 · 1 control

  • 5.3 Organizational roles, responsibilities and authorities

ISO 14004:2016 · 1 control

  • 5.3 Organizational roles, responsibilities and authorities

ISO 22000:2018 · 1 control

  • 5.3 Organizational roles, responsibilities and authorities
  • ISO-22313-5.3 Organizational roles, responsibilities and authorities

ISO 27701:2019 · 1 control

  • 5.3.3 Organizational roles, responsibilities and authorities

ISO 31000:2018 · 1 control

  • 5.4.3 Assigning organizational roles, authorities, responsibilities and accountabilities

ISO 37001:2016 · 1 control

  • 5.3 5.3 Organizational roles, responsibilities and authorities
  • ISO-37002-5.3 Organizational roles, responsibilities and authorities
  • ISO-39001-5.3 Organizational roles, responsibilities and authorities
  • ISO-41001-5.3 Organizational roles, responsibilities and authorities

ISO 45001:2018 · 1 control

  • 5.3 Organizational roles, responsibilities and authorities
  • ISO-50001-5.3 Organizational roles, responsibilities and authorities

ISO 55001:2014 · 1 control

  • 5.3 Organizational roles, responsibilities and authorities

ISO 9001:2015 · 1 control

  • 5.3 Organizational roles, responsibilities and authorities

ISO/IEC 27003:2017 · 1 control

  • ISO27003-5.3 Organizational roles, responsibilities and authorities

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Framework – ISO/IEC 23894:2023

Query this from an agent

The graph holds this control, the 20 it maps to, and the evidence behind each claim, over MCP and REST.