Under ISO/IEC 42001, what is the purpose of the 'AI system impact assessment'?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because ISO/IEC 42001 requires organizations to conduct impact assessments that consider the full range of impacts an AI system may have on individuals, groups, and broader society, including risks to fundamental rights, dignity, and wellbeing. This is analogous to a DPIA but broader, covering AI-specific harms beyond privacy.
Full explanation below image
Full Explanation
B is correct because ISO/IEC 42001 requires organizations to conduct impact assessments that consider the full range of impacts an AI system may have on individuals, groups, and broader society, including risks to fundamental rights, dignity, and wellbeing. This is analogous to a DPIA but broader, covering AI-specific harms beyond privacy. Financial ROI (A) is a business case consideration, not an ISO/IEC 42001 impact assessment. Environmental impact (C) is one narrow element. Technical performance (D) is model validation, not impact assessment.