ISO/IEC TR 24028:2020
Mitigation measures – ISO/IEC TR 24028:2020

ISO/IEC TR 24028:2020 9.11.1: Compliance

Trustworthiness in use includes compliance with the laws, regulations and standards applicable to the AI system and its domain.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 24 controls across 5 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 38500:2024 · 13 controls

  • 4.1 Outcomes of good governance of IT
  • 5.10.2 Risk governance: governance implications for use of IT
  • 5.11.1 Social responsibility: principle
  • 5.11.2 Social responsibility: governance implications for use of IT
  • 5.12.2 Viability and performance over time: governance implications for use of IT
  • 5.2.2 Purpose: governance implications for use of IT
  • 5.3.2 Value generation: governance implications for use of IT
  • 5.4.2 Strategy: governance implications for use of IT
  • 5.6.2 Accountability: governance implications for use of IT
  • 5.7.2 Stakeholder engagement: governance implications for use of IT
  • 5.8.2 Leadership: governance implications for use of IT
  • 5.9.2 Data and decisions: governance implications for use of IT
  • 7.2.6 Performance

ISO 37301:2021 · 8 controls

  • 4.4 Compliance management system
  • 4.5 Compliance obligations
  • 4.6 Compliance risk assessment
  • 5.1.2 Compliance culture
  • 5.1.3 Compliance governance
  • 5.2 Compliance policy
  • 5.3.2 Compliance function
  • 9.1.4 Compliance reporting

ISO 14001:2015 · 1 control

  • 6.1.3 Compliance obligations

ISO 14004:2016 · 1 control

  • 6.1.3 Compliance obligations

ISO 27001:2022 · 1 control

  • 5.36 Compliance with policies, rules and standards for information security

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Mitigation measures – ISO/IEC TR 24028:2020

Query this from an agent

The graph holds this control, the 24 it maps to, and the evidence behind each claim, over MCP and REST.