ISO/IEC 38507:2022 has arrived! [Cue dramatic music]. Let’s see how it will support your organisation’s artificial intelligence (AI) governance.

Who’s the audience?

In short, it’s a document that guides an organisation’s governing body on how to enable and govern AI.

The aim is to ensure that the organisation uses AI effectively, efficiently, and acceptably—now and in the future.

However, the document has value to people other than an organisation’s governing body. It’s also useful for:

  • executive managers;
  • external businesses or technical specialists, such as legal or accounting specialists, retail or industrial associations, or professional bodies;
  • public authorities and policymakers;
  • internal and external service providers (including consultants); and
  • assessors and auditors.

Overview of ISO/IEC 38507:2022

The document deals with the following topics:

  • How an organisation’s use of AI impacts governance and accountability
  • AI systems
    • How AI differs from other IT
    • The AI ecosystem
    • Benefits of using AI
    • Constraints on using AI
  • Policies to address an organisation’s use of AI
    • Governing AI
    • Governing decision-making
    • Governing data use
    • Culture and values
    • Compliance
    • Risk

Why should I care?

If you use AI, you need to have an AI governance programme in place. Otherwise, anyone in your organisation could do whatever they want with AI.

Based on the overview, ISO/IEC 38507:2022 is crucial to supporting a robust governance programme in organisations (public or private). The reason is that it deals with most governance measures you’d ordinarily have in place when dealing with other IT. So, the document ensures you cover your AI governance bases.

If you want to explore the document more, feel free to buy it from ISO.

How we can help

  • Strengthen your organisation’s AI GRC by consulting with our specialists or attending our public or private workshops.
  • Determine how AI impacts your organisation by asking us for an AI risk assessment.
  • Collect and acquire big data used to train AI lawfully by asking us to draft your big data contracts.
  • Protect your commercial interests by asking us to draft your AI contracts.
  • Stay updated with the latest AI law news by subscribing to our newsletter.
  • Discover more about AI by reading our AI law page.