ISO/IEC 42001:2023 A.8.5: Information for interested parties

What else in your programme already covers this

This control maps to 26 controls across 9 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

EU AI Act · 6 controls

EUAI-Art.21 Cooperation with competent authorities
EUAI-Art.49 Registration
EUAI-Art.50 Transparency obligations for providers and deployers of certain AI systems
EUAI-Art.52 Procedure
EUAI-Art.71 EU database for high-risk AI systems
EUAI-Art.86 Right to explanation of individual decision-making

NIST SP 800-53 Rev 5 · 4 controls

NIST800-AC-8 AC-8 System Use Notification
NIST800-PL-7 PL-7 Concept of Operations
NIST800-PM-20 PM-20 Dissemination of Privacy Program Information
NIST800-PT-5 PT-5 Privacy Notice

PCI DSS 4.0 · 4 controls

12.1.1 12.1.1 Overall information security policy established and disseminated
12.8.2 12.8.2 TPSP contracts acknowledging account data responsibility
12.9.2 12.9.2 TPSP support for customer information requests
2.1.1 2.1.1 Requirement 2 policies and procedures governed

SOC 2 · 4 controls

SOC2-CC2.3 CC2.3 Communication with external parties about internal control (COSO principle 15)
SOC2-P1.1 P1.1 Privacy notice to data subjects
SOC2-P6.4 P6.4 Privacy commitments from vendors and third parties
SOC2-P6.6 P6.6 Notifying breaches and incidents

ISO 27001:2022 · 3 controls

5.31 Legal, statutory, regulatory and contractual requirements
5.5 Contact with authorities
5.6 Contact with special interest groups

NIST AI Risk Management Framework (AI RMF 1.0) · 2 controls

AIRMF-MP-2.2 Information about the AI system's knowledge limits and how system output may be utilized and overseen by humans is documented
AIRMF-MS-2.8 Risks associated with transparency and accountability as identified in the MAP function are examined and documented

APPI · 1 control

APPI-A32 Matters Concerning Retained Personal Data to Be Made Accessible

ASEAN Guide on AI Governance and Ethics · 1 control

AIGE-SI-1 Stakeholder communication policy and AI-use disclosure

ISO 27002:2022 · 1 control

5.31 Legal, statutory, regulatory and contractual requirements

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of ISO/IEC 42001:2023 have you already done?

ISO/IEC 42001:2023 A.8.5 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO/IEC 42001:2023 your existing evidence covers. Hold NIST AI Risk Management Framework (AI RMF 1.0) and 30 of 38 ISO/IEC 42001:2023 controls already carry evidence.

If you hold NIST AI Risk Management Framework (AI RMF 1.0)78.9% covered · 8 gaps If you hold EU AI Act57.9% covered · 16 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the NIST AI Risk Management Framework (AI RMF 1.0) pair alone.

See the released pairs, $299 each Browse the graph free