A housing authority AI policy references ISO/IEC 42001-style management-system practices. What is the intent?
Select an answer to reveal the explanation.
Short Explanation
It's about building a living AI management system with accountability and continual improvement, not using ISO 42001 conformity checks to validate tenant scoring accuracy. You also don't prove responsible procurement just by filing vendor certificates, and you shouldn't swap in ISO 27001 security controls and call it AI governance.
Full Explanation
Referencing ISO/IEC 42001-style management-system practices in a housing authority AI policy intends aligning municipal AI governance with AI management-system concepts such as continual improvement and accountability. Management-system thinking emphasizes defined roles, risk processes, documented controls, performance evaluation, and ongoing improvement—not applying ISO 42001 conformity assessment to validate model accuracy for tenant eligibility scoring, which mistakes a management system for a technical accuracy check.
Applying ISO 42001 conformity assessment to validate model accuracy for tenant eligibility scoring mistakes the management-system standard for a technical validation tool; ISO 42001 governs the AI management system, not the accuracy of a specific scoring model. Documenting vendor ISO 42001 certificates as evidence of responsible AI procurement for housing authority contracts confuses paperwork with governance—collecting certificates does not by itself establish the authority's own management system or its accountability structures. Interpreting the ISO 42001 reference as implementation of ISO 27001 security controls for housing data systems captures part of a management system but drops the AI governance structure that makes it one. The actual intent is broader: align municipal AI governance with the full set of management-system ideas—roles, risk processes, and continual improvement—not just ISO 27001 security controls for housing data systems or vendor certificate paperwork.
Exam caveat: referencing 42001-style concepts is alignment of approach; treating vendor ISO 42001 certificates as sufficient evidence of responsible procurement conflates documentation with governance, and formal certification is a separate organizational decision not automatically conferred by policy language alone without operating evidence.
Operational check: translate policy references into operating procedures for risk reviews, internal audits, corrective actions, and management review of housing AI systems, and schedule recurring evidence collection that demonstrates continual improvement over time.