app.cubelet.ai
← cubelet.ai
Cubelet AI
Sign in
Sign up free
Explore
Cubelet Catalog
Atomic knowledge units for GRC, cybersecurity, and compliance professionals.
CMMC Level 2
CISA
CISM
CRISC
CDPSE
CMMC Level 2
VulnOps
🔒 CISA
🔒 CISM
🔒 CRISC
🔒 CDPSE
NIST AI RMF
ISO 42001
EU AI Act
TRAIGA
All
Main Clauses (4-10) — Management System Requirements
Annex B — AI-Specific Controls
54 cubelets
⊞ Grid
≡ List
iso42001-4.1
4.1: Understanding the organization and its context
54/60
iso42001-4.4
4.4: AI management system
54/60
iso42001-5.1
5.1: Leadership and commitment
55/60
iso42001-5.2
5.2: AI Policy
54/60
iso42001-5.3
5.3: Roles, responsibilities and authorities
52/60
iso42001-6.1
6.1: AI risk assessment and treatment (6.1.1-6.1.4)
55/60
iso42001-6.2
6.2: AI objectives and planning to achieve them
54/60
iso42001-7.1
7.1: Resources
53/60
iso42001-7.2
7.2: Competence
55/60
iso42001-7.3
7.3: Awareness
52/60
iso42001-7.4
7.4: Communication
53/60
iso42001-7.5
7.5: Documented information and control
53/60
iso42001-8.2
8.2: AI risk assessment (operational)
54/60
iso42001-8.3
8.3: AI risk treatment (operational)
53/60
iso42001-8.4
8.4: AI system impact assessment
52/60
iso42001-9.1
9.1: Monitoring, measurement, analysis and evaluation
52/60
iso42001-9.3
9.3: Management review (inputs, results)
54/60
iso42001-10.1
10.1: Continual improvement of the AI management system
52/60
iso42001-b.2.2
B.2.2: AI policy
54/60
iso42001-b.2.4
B.2.4: Review of the AI policy
52/60
iso42001-b.3.2
B.3.2: AI roles and responsibilities
53/60
iso42001-b.4.2
B.4.2: Resource documentation
52/60
iso42001-b.4.3
B.4.3: Data resources
52/60
iso42001-b.4.4
B.4.4: Tooling resources
52/60
iso42001-b.4.5
B.4.5: System and computing resources
53/60
iso42001-b.4.6
B.4.6: Human resources
52/60
iso42001-b.5.2
B.5.2: AI system impact assessment process
52/60
iso42001-b.5.3
B.5.3: Documentation of impact assessments
55/60
iso42001-b.5.4
B.5.4: Assessing impact on individuals and groups
52/60
iso42001-b.5.5
B.5.5: Assessing societal impacts
55/60
iso42001-b.6.1.2
B.6.1.2: Objectives for responsible development
54/60
iso42001-b.6.1.3
B.6.1.3: Processes for responsible design and development
52/60
iso42001-b.6.2.2
B.6.2.2: AI system requirements and specification
53/60
iso42001-b.6.2.3
B.6.2.3: Documentation of design and development
53/60
iso42001-b.6.2.4
B.6.2.4: AI system verification and validation
52/60
iso42001-b.6.2.5
B.6.2.5: AI system testing
54/60
iso42001-b.6.2.6
B.6.2.6: AI system operation and monitoring
53/60
iso42001-b.6.2.7
B.6.2.7: AI system technical documentation
53/60
iso42001-b.6.2.8
B.6.2.8: AI system event logging
52/60
iso42001-b.7.2
B.7.2: Data for development and enhancement
53/60
iso42001-b.7.3
B.7.3: Acquisition of data
54/60
iso42001-b.7.4
B.7.4: Quality of data for AI systems
53/60
iso42001-b.7.5
B.7.5: Data provenance
53/60
iso42001-b.7.6
B.7.6: Data preparation
54/60
iso42001-b.8.2
B.8.2: System documentation and information for users
52/60
iso42001-b.8.3
B.8.3: External reporting
51/60
iso42001-b.8.4
B.8.4: Communication of incidents
55/60
iso42001-b.8.5
B.8.5: Information for interested parties
52/60
iso42001-b.9.2
B.9.2: Processes for responsible use of AI
54/60
iso42001-b.9.3
B.9.3: Objectives for responsible use
52/60
iso42001-b.9.4
B.9.4: Intended use of the AI system
54/60
iso42001-b.10.2
B.10.2: Allocating responsibilities
53/60
iso42001-b.10.3
B.10.3: Suppliers
55/60
iso42001-b.10.4
B.10.4: Customers
53/60