MCT BEGINNING

1. Examples of processes that can be outsourced:

• Carry out the management review
• Audit
• Host the data with a cloud provider
• Planning the AIMS
• Develop the algorithms
• Apply discipline

2. Assessing the risks allows us to:

• Identify the risks
• Analyze the risks
• Assess the risks
• Achieve the objectives of the AIMS
• Mitigate risks

3. The statement of applicability (SoA) allows you to:

• Treat the risks (the risk treatment plan comes from the SoA)
• Determine what is part of the AIMS
• Identify and keep up to date the controls to be implemented
• Plan and audit the AIMS
• Carry out process mapping

4. The AI policy:

• Meets the strategic direction of the organization
• Meets legal requirements
• Meets the objectives of Annex A of ISO 42001
• Provides the framework for defining AI objectives
• Is communicated to all staff

5. Examples of data sources:

• Internal (event logs, internal surveys)
• Technical (manually copied without documentation)
• Individual (files sent by email without clear reference to their provenance)
• Public external (publications, content available on the Internet)
• Commercial external (specialized suppliers, business partners)
• Automatically generated (sensors, simulation models)