MCT BEGINNING

1. The AI policy:

• Meets the strategic direction of the organization
• Meets legal requirements
• Meets the objectives of Annex A of ISO 42001
• Provides the framework for defining AI objectives
• Is communicated to all staff

2. What is the main objective of Annex A.4?

• Provide a framework for developing and using the AI system responsibly
• Establish accountability within the organization to maintain its responsible approach
• Ensure the organization is responsible for its resources
• Ensure the organization uses an AI system responsibly
• Ensure the organization remains responsible in its relationships with third parties and customers

3. Examples of processes that can be outsourced:

• Carry out the management review
• Audit
• Host the data with a cloud provider
• Planning the AIMS
• Develop the algorithms
• Apply discipline

4. Examples of data sources:

• Internal (event logs, internal surveys)
• Technical (manually copied without documentation)
• Individual (files sent by email without clear reference to their provenance)
• Public external (publications, content available on the Internet)
• Commercial external (specialized suppliers, business partners)
• Automatically generated (sensors, simulation models)

5. The ISO 42001standard defines for an information security management system:

• The requirements
• Overview and vocabulary
• Reference control objectives and controls
• The risk management