DRAFT INTERNATIONAL STANDARD IS0/IEC DIS 42005 ISO/IEC JTC 1/SC 42 Secretariat: ANSI Voting begins on: Voting terminates on: 2024-02-01 2024-04-25 Information technology Artificial intelligence Al system impact assessment ICS: 35.020 THIS DOCUMENT IS A DRAFT CIRCULATED FOR COMMENT AND APPROVAL. IT IS THEREFORE SUBJECT TO CHANGE AND MAY This document is circulated as received from the committee secretariat. NOT BE REFERRED TO AS AN INTERNATIONAL STANDARD UNTIL PUBLISHED AS SUCH. IN ADDITION TO THEIR EVALUATION AS INDUSTRIAL, ACCEPTABLE FOR TECHNOLOGICAL, COMMERCIAL AND DRAFT INTERNATIONAL USERPURPOSES STANDARDSMAYONOCCASIONHAVETO BE CONSIDERED IN THE LIGHT OF THEIR POTENTIAL TO BECOME STANDARDS TO WHICH REFERENCE MADE Reference number MAY BE IN NATIONAL REGULATIONS. IEC IS0/IEC DIS 42005:2024(E) RECIPIENTS OF THIS DRAFT ARE INVITED SUBMIT, WITHTHEIRCOMMENTS, NOTIFICATION OF ANY RELEVANT PATENT RIGHTS OF WHICH THEY ARE AWARE AND TO @ IS0/IEC 2024 PROVIDE SUPPORTING DOCUMENTATION. IS0/IEC DIS 42005:2024(E) COPYRIGHT PROTECTED DOCUMENT @ IS0/IEC 2024 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on or ISO's member body in the country of the requester ISO copyright office CP 401 : Ch. de Blandonnet 8 CH-1214 Vernier, Geneva Phone: +41 22 749 01 11 Email: copyright@iso.org Website: www.iso.org Published in Switzerland ii @IS0/IEC 2024 - All rights reserved IS0/IEC DIS 42005:2024(E) 14 Contents 15 Foreword. 16 Introduction ... 17 1 Scope 18 Normative references . 2 19 Terms and definitions . 3 20 Implementing an AI system impact assessment process . 4 21 4. General .. 22 23 4.3 Integration with other organizational management processes.... 24 4.4 Timing of AI system impact assessment.. 25 4.5 Guidance for determining the scope of the AI system impact assessment... 26 4.6 Allocating responsibilities... 27 4.7 Establishing thresholds for sensitive uses, prohibited uses and impact scales.. 28 4.8 Performing the Al system impact assessment.... 29 4.9 Analysing the results of the AI system impact assessment... 30 Recording and reporting .. 4.10 31 4.11 Approva. proces.... 32 4.12 Monitoring and review ... 33 5 Documenting the Al system impact assessment.... 34 5.1 35 5.2 Scope of the AI system impact assessment. 36 .3 Al system information .. 37 5.3.1 AI system description. 38 5.3.2 AI system features... 39 5.3.3 AI system purpose .. 40 5.3.4 41 5.3.5 Unintended uses... 42 5.4 Data information and quality 43 5.4.1 44 5.4.2 Data information. 45 Data quality documentation. 5.4.3 46 5.5 Algorithm and mo del information .. 10 47 5.5.1 General.... 48 5.5.2 Information on algorithms used by the organization ... 49 5.5.3 Information on algorithm development... 50 5.5.4 Information on models used in an AI system . 11 51 5.5.5 Information on model development ... 52 . Deploymen.t environment... 11 53 5.6.1 Geographical area and languages .. 11 54 5.6.2Deployment environment complexity and constraints. 55 5.7 Relevant interested parties..... 12 56 5.8 Actual and potential impacts... .13 57 5.8.1 General.. 58 Benefits and harms... 5.8.2 ..13 59 5.8.3 Al system failures and misuse or abuse.... 60 5.9 Measures to address harms and benefits .. 17 61 Annex A (informative) Guidance for use with IS0/IEC 42001 62 Annex B (informative) Guidance for use with IS0/IEC 23894. 21 @ IS0/IEC 2024- All rights reserved iii