Initiative overview
ISO/IEC 38507:2022 was prepared jointly by two subcommittees of Joint Technical Committee ISO/IEC JTC 1: SC 40, covering IT service management and IT governance, and SC 42, covering artificial intelligence. The initiative's objective is to guide the governing body of an organisation that is using or considering artificial intelligence, focusing on the human governance of an organisation's AI use rather than on the underlying technologies themselves.
It addresses the additional opportunities, risks and responsibilities that arise from AI use. The initiative examines both governance and organisational policies and how they apply to AI, noting that the operational aspects of these policies are carried out through management. It points to other standards for related matters such as social responsibility, trustworthiness (including risk management, bias management and quality) and compliance management.
Key terms are defined drawing on ISO/IEC 22989 and ISO/IEC 38500, including oversight, described as monitoring the implementation of organisational and governance policies and related tasks, services and products, and risk appetite, defined as the amount and type of risk an organisation is willing to pursue or retain. Development stakeholders include national bodies that are members of ISO or IEC, participating through technical committees, along with other international organisations, governmental and non-governmental, in liaison with ISO and IEC.
