app.cubelet.ai
← cubelet.ai
Cubelet AI
Sign in
Sign up free
Explore
Cubelet Catalog
Atomic knowledge units for GRC, cybersecurity, and compliance professionals.
CMMC Level 2
CISA
CISM
CRISC
CDPSE
CMMC Level 2
VulnOps
🔒 CISA
🔒 CISM
🔒 CRISC
🔒 CDPSE
NIST AI RMF
ISO 42001
EU AI Act
TRAIGA
All
Main Clauses (4-10) — Management System Requirements
Annex B — AI-Specific Controls
54 cubelets
⊞ Grid
≡ List
iso42001-4.1
4.1: Understanding the organization and its context
55/60
iso42001-4.4
4.4: AI management system
55/60
iso42001-5.1
5.1: Leadership and commitment
55/60
iso42001-5.2
5.2: AI Policy
55/60
iso42001-5.3
5.3: Roles, responsibilities and authorities
54/60
iso42001-6.1
6.1: AI risk assessment and treatment (6.1.1-6.1.4)
56/60
iso42001-6.2
6.2: AI objectives and planning to achieve them
54/60
iso42001-7.1
7.1: Resources
55/60
iso42001-7.2
7.2: Competence
55/60
iso42001-7.3
7.3: Awareness
55/60
iso42001-7.4
7.4: Communication
56/60
iso42001-7.5
7.5: Documented information and control
57/60
iso42001-8.2
8.2: AI risk assessment (operational)
55/60
iso42001-8.3
8.3: AI risk treatment (operational)
56/60
iso42001-8.4
8.4: AI system impact assessment
56/60
iso42001-9.1
9.1: Monitoring, measurement, analysis and evaluation
55/60
iso42001-9.3
9.3: Management review (inputs, results)
56/60
iso42001-10.1
10.1: Continual improvement of the AI management system
56/60
iso42001-b.2.2
B.2.2: AI policy
55/60
iso42001-b.2.4
B.2.4: Review of the AI policy
54/60
iso42001-b.3.2
B.3.2: AI roles and responsibilities
54/60
iso42001-b.4.2
B.4.2: Resource documentation
57/60
iso42001-b.4.3
B.4.3: Data resources
55/60
iso42001-b.4.4
B.4.4: Tooling resources
56/60
iso42001-b.4.5
B.4.5: System and computing resources
55/60
iso42001-b.4.6
B.4.6: Human resources
57/60
iso42001-b.5.2
B.5.2: AI system impact assessment process
56/60
iso42001-b.5.3
B.5.3: Documentation of impact assessments
55/60
iso42001-b.5.4
B.5.4: Assessing impact on individuals and groups
57/60
iso42001-b.5.5
B.5.5: Assessing societal impacts
57/60
iso42001-b.6.1.2
B.6.1.2: Objectives for responsible development
56/60
iso42001-b.6.1.3
B.6.1.3: Processes for responsible design and development
56/60
iso42001-b.6.2.2
B.6.2.2: AI system requirements and specification
55/60
iso42001-b.6.2.3
B.6.2.3: Documentation of design and development
56/60
iso42001-b.6.2.4
B.6.2.4: AI system verification and validation
56/60
iso42001-b.6.2.5
B.6.2.5: AI system testing
57/60
iso42001-b.6.2.6
B.6.2.6: AI system operation and monitoring
56/60
iso42001-b.6.2.7
B.6.2.7: AI system technical documentation
55/60
iso42001-b.6.2.8
B.6.2.8: AI system event logging
55/60
iso42001-b.7.2
B.7.2: Data for development and enhancement
56/60
iso42001-b.7.3
B.7.3: Acquisition of data
55/60
iso42001-b.7.4
B.7.4: Quality of data for AI systems
56/60
iso42001-b.7.5
B.7.5: Data provenance
56/60
iso42001-b.7.6
B.7.6: Data preparation
55/60
iso42001-b.8.2
B.8.2: System documentation and information for users
57/60
iso42001-b.8.3
B.8.3: External reporting
57/60
iso42001-b.8.4
B.8.4: Communication of incidents
57/60
iso42001-b.8.5
B.8.5: Information for interested parties
55/60
iso42001-b.9.2
B.9.2: Processes for responsible use of AI
55/60
iso42001-b.9.3
B.9.3: Objectives for responsible use
56/60
iso42001-b.9.4
B.9.4: Intended use of the AI system
55/60
iso42001-b.10.2
B.10.2: Allocating responsibilities
55/60
iso42001-b.10.3
B.10.3: Suppliers
57/60
iso42001-b.10.4
B.10.4: Customers
55/60