ISO42001-8.3-01
Risk Management
8.3 — AI risk treatment (operational)
Implement AI risk treatment plan
Description
The organization must implement the AI risk treatment plan that was established in section 6.1.3 of the standard.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
ISO42001-8.3-02
Documentation
Retain documented information of AI risk treatment results
ISO42001-8.3-03
Documentation
Provide evidence of effective control implementation
ISO42001-8.3-04
Documentation
Document acceptable residual risk levels
ISO42001-8.3-05
Risk Management
Review and update risk treatment plan when outcomes not achieved
ISO42001-8.3-06
Risk Management
Integrate risk treatment into AI system lifecycle processes
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started