Standard
EN ISO/IEC 23894:2024 Information technology - Artificial intelligence - Guidance on risk management
PublishedISO/IEC JTC 1/SC 42, European adoption through CEN-CENELEC, Dutch adoption by NEN1 Feb 2024
Guideline standard for risk management of AI, based on the ISO 31000 approach. The standard helps organisations developing, producing, supplying or using AI to identify AI-specific risk sources and embed risk management in their existing processes. The European adoption NEN-EN-ISO/IEC 23894:2024 was published on 1 February 2024 and superseded NEN-ISO/IEC 23894:2023. It is a guideline, not a prescriptive standard, and is not a harmonised standard under the AI Act; that role is foreseen for prEN 18228.
What this means for you
This is the standard with which an organisation can already demonstrably undertake AI risk management today, without waiting for the European prescriptive standard.
Topics