Standards & Frameworks
Reference standards & frameworks
AI STANDARD courses, assessments and services draw on these global standards and frameworks. Each page is a practical, plain-language explanation — from “what is it?” to “how do we implement it?”.
ISO/IEC 42001:2023
Standard · ISO/IEC
Artificial intelligence management system
The first international management-system standard for AI: a framework for organizations to develop, provide and use AI responsibly, in a controlled and improvable way.
NIST AI RMF 1.0
Framework · NIST
NIST AI Risk Management Framework
A voluntary framework from the US National Institute of Standards and Technology for managing AI risk across the lifecycle, built on four functions: Govern, Map, Measure and Manage.
ISO/IEC 23894:2023
Standard · ISO/IEC
Guidance on AI risk management
Guidance on applying the ISO 31000 risk-management principles and process to the specific context of AI.
ISO/IEC 27001:2022
Standard · ISO/IEC
Information security management systems
The established information security standard; AI STANDARD refers to it where AI use touches data security, access control and suppliers.
ISO/IEC 38507:2022
Standard · ISO/IEC
Governance implications of the use of AI by organizations
Guidance for boards and executives on their governance responsibilities when the organization uses AI.
EU AI Act — Regulation (EU) 2024/1689
Regulation · European Union
EU Artificial Intelligence Act
The first comprehensive AI law, using a risk-based approach; relevant for companies serving the EU market and as a best-practice reference.
OECD AI Principles
Principles · OECD
OECD AI Principles
International principles for trustworthy, human-centred AI that inform many national policies and regulations.
How do they fit together?
ISO/IEC 42001 provides the management-system structure; the NIST AI RMF and ISO/IEC 23894 the practical risk detail; ISO/IEC 27001 the information security controls; and ISO/IEC 38507 the board’s role. Organizations usually combine them to fit their needs.
This page is AI STANDARD's explanation and interpretation; it does not reproduce the official text. Obtain the full standard from its publisher.
Free organizational readiness assessment
Prefer to talk on the phone? +98 21 8280 3801