PECB ISO/IEC 42001 Foundation Practice Tests

Explanation

ISO/IEC 23894:2023 provides guidance on AI risk management and supports ISO/IEC 42001 clauses 6.1.2 (AI risk assessment) and 6.1.3 (AI risk treatment). ISO/IEC 22989 provides terminology, ISO/IEC 23053 provides an ML framework, and ISO/IEC 42006 sets requirements for certification bodies.

Explanation

The standard defines the governing body as the people accountable for the performance and conformance of the organization. This is distinct from top management, which directs and controls the organization, and from AI providers or relevant authorities, who have different roles in the AI ecosystem or regulatory landscape.

Explanation

Clause 7.3 (Awareness) requires that persons doing work under the organization's control are aware of the AI policy, their contribution to the effectiveness of the AIMS, and the implications of not conforming. Clause 7.2 addresses competence, while Clauses 9 and 10 address evaluation and improvement, not the foundational awareness requirement.

Explanation

Clause 10.2, Nonconformity and Corrective Action, requires the organization to react to nonconformities and evaluate the need for action to eliminate the cause to prevent recurrence. Clause 9.2 covers internal audits, Clause 10.1 covers continual improvement in general, and Clause 8.1 covers operational planning. Corrective action is distinct from mere correction or general improvement.

Explanation

Clause 4.1 of ISO/IEC 42001 requires the organization to determine internal and external issues that are relevant to its purpose and that affect its ability to achieve the intended outcomes of its AI management system. Clause 4.2 focuses on interested parties, Clause 4.3 on scope, and Clause 4.4 on the establishment of the system itself.