ISO/IEC 42001:2023 4.2: Understanding the needs and expectations of interested parties

What else in your programme already covers this

This control maps to 43 controls across 25 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Cybersecurity Framework 2.0 · 4 controls

NIST-CSF-GV.OC-02 Internal and external stakeholders are understood, and their needs and expectations regarding cybersecurity risk management are understood and considered
NIST-CSF-GV.OC-03 Legal, regulatory, and contractual requirements regarding cybersecurity - including privacy and civil liberties obligations - are understood and managed
NIST-CSF-GV.SC-04 Suppliers are known and prioritized by criticality
NIST-CSF-ID.AM-04 Inventories of services provided by suppliers are maintained

SOC 2 · 4 controls

SOC2-CC1.2 CC1.2 Board independence and oversight of internal control (COSO principle 2)
SOC2-CC2.3 CC2.3 Communication with external parties about internal control (COSO principle 15)
SOC2-P1.1 P1.1 Privacy notice to data subjects
SOC2-P6.4 P6.4 Privacy commitments from vendors and third parties

ISO 22301:2019 · 3 controls

4.2 Understanding the needs and expectations of interested parties
4.2.1 General
4.2.2 Legal and regulatory requirements

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-A&A-04 Requirements Compliance
CCM-GRC-07 Information System Regulatory Mapping

ISO 27002:2022 · 2 controls

5.31 Legal, statutory, regulatory and contractual requirements
5.6 Contact with special interest groups

ISO 27701:2019 · 2 controls

4.2 Application of ISO/IEC 27001:2013 requirements
5.2.2 Understanding the needs and expectations of interested parties

ISO 37002:2021 - Whistleblowing Management Systems · 2 controls

ISO-37002-4.2 Understanding the needs and expectations of interested parties
ISO37002-4.2 Needs and Expectations of Interested Parties

ISO 39001:2012 - Road Traffic Safety Management · 2 controls

ISO-39001-4.2 Understanding the needs and expectations of interested parties
ISO39001-4.2 Needs and Expectations of Interested Parties

ISO 41001:2018 - Facility Management Systems · 2 controls

ISO-41001-4.2 Understanding the needs and expectations of interested parties
ISO41001-4.2 Needs and Expectations of Interested Parties

ISO 50001:2018 - Energy Management Systems · 2 controls

ISO-50001-4.2 Understanding the needs and expectations of interested parties
4.2 Understanding the needs and expectations of interested parties

ISO 56002 · 2 controls

ISO-56002-4.2 Understanding the needs and expectations of interested parties
ISO56002-4.2 Understanding needs and expectations of interested parties

NIST SP 800-53 Rev 5 · 2 controls

NIST800-PM-11 PM-11 Mission and Business Process Definition
NIST800-PM-28 PM-28 Risk Framing

AS9100D - Aerospace Quality Management System · 1 control

AS9100D-4.2 Understanding Needs and Expectations of Interested Parties

Australia National Framework for the Assurance of AI in Government (2024) · 1 control

1.2 1.2 Consult with stakeholders

ISO 14001:2015 · 1 control

4.2 Understanding the needs and expectations of interested parties

ISO 14004:2016 · 1 control

4.2 Understanding the needs and expectations of interested parties

ISO 22000:2018 · 1 control

4.2 Understanding the needs and expectations of interested parties

ISO 22313:2020 - Guidance on Business Continuity Management Systems · 1 control

ISO-22313-4.2 Understanding the needs and expectations of interested parties

ISO 27001:2022 · 1 control

5.31 Legal, statutory, regulatory and contractual requirements

ISO 37001:2016 · 1 control

4.2 4.2 Understanding the needs and expectations of stakeholders

ISO 37301:2021 · 1 control

4.2 Understanding the needs and expectations of interested parties

ISO 45001:2018 · 1 control

4.2 Understanding the needs and expectations of workers and other interested parties

ISO 55001:2014 · 1 control

4.2 Understanding the needs and expectations of stakeholders

ISO 9001:2015 · 1 control

4.2 Understanding the needs and expectations of interested parties

ISO/IEC 27003:2017 · 1 control

ISO27003-4.2 Understanding the needs and expectations of interested parties

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of ISO/IEC 42001:2023 have you already done?

ISO/IEC 42001:2023 4.2 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO/IEC 42001:2023 your existing evidence covers. Hold NIST AI Risk Management Framework (AI RMF 1.0) and 30 of 38 ISO/IEC 42001:2023 controls already carry evidence.

If you hold NIST AI Risk Management Framework (AI RMF 1.0)78.9% covered · 8 gaps If you hold EU AI Act57.9% covered · 16 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the NIST AI Risk Management Framework (AI RMF 1.0) pair alone.

See the released pairs, $299 each Browse the graph free