ISO/IEC 42005:2025

ISO/IEC 42005:2025 guides organizations that develop, provide or use AI systems on assessing and documenting the impacts an AI system and its foreseeable uses can have on individuals, groups and societies. Clause 5 sets up the process: a structured approach shaped by internal and external factors, documented and integrated with risk and other impact assessments, timed with reassessment triggers and triage, scoped, staffed across disciplines, with thresholds for sensitive and restricted uses and impact scales, then performing, analysing, recording and reporting, approving and monitoring the assessment. Clause 6 sets out what the assessment records: scope, the system's description, functions, purpose and intended and unintended uses, data and data quality, algorithms and models, the deployment environment, affected and other interested parties, benefits and harms across accountability, transparency, fairness, privacy, reliability, safety, explainability and environmental impact, failure and misuse impacts, and the measures taken. It supports ISO/IEC 42001 and ISO/IEC 23894.