ISO/IEC TR 24028:2020
Vulnerabilities, threats and challenges – ISO/IEC TR 24028:2020

ISO/IEC TR 24028:2020 8.1: General: vulnerabilities, threats and challenges

AI systems carry vulnerabilities (weaknesses of an asset or control) that threats can exploit and that reduce trustworthiness; the report surveys AI-specific security and privacy threats, bias, unpredictability, opaqueness, and the challenges arising in specifying, implementing and using AI systems, plus hardware faults.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 21 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 38500:2024 · 18 controls

  • 4.1.1 Overview: governance of IT as a domain of the governance of organizations
  • 4.1.2 Effective performance
  • 4.1.4 Ethical behaviour
  • 4.2 Principles, model and framework
  • 5.10.2 Risk governance: governance implications for use of IT
  • 5.11.2 Social responsibility: governance implications for use of IT
  • 5.12.2 Viability and performance over time: governance implications for use of IT
  • 5.2.2 Purpose: governance implications for use of IT
  • 5.3.2 Value generation: governance implications for use of IT
  • 5.4.2 Strategy: governance implications for use of IT
  • 5.6.2 Accountability: governance implications for use of IT
  • 5.7 Stakeholder engagement
  • 5.7.2 Stakeholder engagement: governance implications for use of IT
  • 5.8 Leadership
  • 5.8.2 Leadership: governance implications for use of IT
  • 5.9.2 Data and decisions: governance implications for use of IT
  • 6.2.1 Engage stakeholders
  • 7.1 Framework: general

ISO 13485:2016 · 1 control

  • 4.1 General requirements

ISO 14004:2016 · 1 control

  • 8.1.1 General guidance: Operational control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Vulnerabilities, threats and challenges – ISO/IEC TR 24028:2020

Query this from an agent

The graph holds this control, the 21 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISO/IEC TR 24028:2020 controls