ISO/IEC 42005:2025
What is ISO/IEC 42005:2025?
ISO/IEC 42005:2025 guides organizations that develop, provide or use AI systems on assessing and documenting the impacts an AI system and its foreseeable uses can have on individuals, groups and societies. Clause 5 sets up the process: a structured approach shaped by internal and external factors, documented and integrated with risk and other impact assessments, timed with reassessment triggers and triage, scoped, staffed across disciplines, with thresholds for sensitive and restricted uses and impact scales, then performing, analysing, recording and reporting, approving and monitoring the assessment. Clause 6 sets out what the assessment records: scope, the system's description, functions, purpose and intended and unintended uses, data and data quality, algorithms and models, the deployment environment, affected and other interested parties, benefits and harms across accountability, transparency, fairness, privacy, reliability, safety, explainability and environmental impact, failure and misuse impacts, and the measures taken. It supports ISO/IEC 42001 and ISO/IEC 23894. Built from the English FDIS text to mid-5.7 and the complete Russian national adoption, GOST R 72514-2026. It comprises 39 controls organised across 2 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where ISO/IEC 42005:2025 overlaps with the standards you already hold
What ISO/IEC 42005:2025 means in your sector
What ISO/IEC 42005:2025 means for your job
Questions people ask about ISO/IEC 42005:2025
What is ISO/IEC 42005:2025?
How many controls does ISO/IEC 42005:2025 have?
Where does ISO/IEC 42005:2025 apply?
Which version of ISO/IEC 42005:2025 is covered here?
Query ISO/IEC 42005:2025 programmatically
ISO/IEC 42005:2025, its 39 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO/IEC 42005:2025 API reference and MCP config →How ready are you for ISO/IEC 42005:2025?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.