From the course: AI Governance for Organizations: Applying ISO/IEC 38507:2022

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Risk controls (Clause 6.7.5)

Risk controls (Clause 6.7.5)

- [Instructor] The AI controls selected by your organization should aim to have a direct impact on the organizational objectives. All control frameworks will always steer users to apply administrative controls before they apply technical controls. For instance, policy should come before access control. The objective of the control is to modify the risk environment to the acceptable level of risk appetite selected by the governing body. In this video, we will focus on these controls, beginning with applicability. Applicability concerns describing the AI system under management and documenting the algorithms and data models, along with their intended purpose. These should be kept in an inventory that is updated continuously. Ethics and review boards are powerful administrative tools. Depending on the use case for your AI, you will determine the highest likelihood and highest negative impact potential. This board's resources should be directed toward the most critical, high-risk, and…

Contents