International

ISO/IEC 42005:2025

42 controls. 0 other frameworks in our corpus share controls with it. Here is all of it, and how much of it you are already doing.

Page built . This page is derived from the framework corpus, which changes when the corpus is extended rather than daily.

42 controls 0 frameworks share controls with it International verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

No measured overlap with another framework in the corpus.

Every control

CodeControlAlso in
2-3Normative references and terms0
5.1A structured and consistent approach shaped by internal and external factors0
5.10Recording and reporting0
5.11Approval process0
5.12Monitoring and review0
5.2Documenting the process0
5.3Integration with other organizational management processes0
5.4Timing of the assessment, reassessment triggers and triaging0
5.5Scope of the AI system impact assessment0
5.6Allocating responsibilities and the multidisciplinary approach0
5.7Establishing thresholds for sensitive uses, restricted uses and impact scales0
5.8Performing the AI system impact assessment0
5.9Analysing the results of the AI system impact assessment0
6.1Documenting the AI system impact assessment: general0
6.2Scope of the AI system impact assessment (documented)0
6.3AI system information0
6.3.1AI system description0
6.3.2AI system functionalities and capabilities0
6.3.3AI system purpose0
6.3.4Intended uses0
6.3.5Unintended uses0
6.4Data information and quality0
6.4.2Data information0
6.4.3Data quality documentation0
6.5Algorithm and model information0
6.5.2Information on algorithms used by the organization0
6.5.3Information on algorithm development0
6.5.4Information on models used in an AI system0
6.5.5Information on model development0
6.6Deployment environment0
6.6.1Geographical area and languages0
6.6.2Deployment environment complexity and constraints0
6.7Relevant interested parties0
6.7.2Directly affected interested parties0
6.7.3Other relevant interested parties0
6.8Actual and reasonably foreseeable impacts0
6.8.2Benefits and harms0
6.8.3AI system failures and reasonably foreseeable misuse0
6.9Measures to address harms and benefits0
A-BAnnexes A and B (informative): guidance for use with ISO/IEC 42001 and with ISO/IEC 238940
CAnnex C (informative): harms and benefits taxonomy0
D-EAnnexes D and E (informative): aligning with other assessments; example assessment template0

Tell me when ISO/IEC 42005:2025 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for ISO/IEC 42005:2025, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition