International · standard

ISO/IEC 23894:2023 Artificial Intelligence Risk Management Guidance

International guidance for organisations managing risks specifically related to artificial intelligence.

voluntaryISO / IECVerified 23 Aug 2026

Applicability

Organisations developing, producing, deploying or using AI systems.

Enforcement context

Voluntary guidance unless incorporated elsewhere.

Penalty context: No standalone statutory penalties. CRG does not reproduce proprietary clause text.

Regulatory timeline

Material dates and status changes.

01 Feb 2023

ISO/IEC 23894

International guidance for organisations managing risks specifically related to artificial intelligence.

Source for this event →

CRG implementation mapping

Operational obligations and evidence expectations.

23894-RISK

AI risk lifecycle

Apply risk-management activities across the AI lifecycle and organisational context.

Actor: organisation · Domain: risk management

Evidence: Risk method, assessments, treatments, ownership and monitoring.

Primary source

Verify the underlying instrument.

Cybatar's mapping is designed for AI governance and assurance work. Legal interpretation remains anchored to the current primary text and competent authority guidance.

Open ISO source