A technology company asks its legal team to compare ISO/IEC 42001 and the NIST AI RMF for adoption. Which statement BEST describes a key structural difference between the two frameworks?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because ISO/IEC 42001 is structured as a management system standard following the PDCA cycle (consistent with other ISO standards), while the NIST AI RMF organizes its guidance around four core functions: Govern, Map, Measure, and Manage. A is wrong because both are voluntary frameworks.
Full explanation below image
Full Explanation
B is correct because ISO/IEC 42001 is structured as a management system standard following the PDCA cycle (consistent with other ISO standards), while the NIST AI RMF organizes its guidance around four core functions: Govern, Map, Measure, and Manage. A is wrong because both are voluntary frameworks. C is wrong because ISO/IEC 42001 is an international standard with global applicability. D is wrong because ISO/IEC 42001 can be certified, while the NIST AI RMF does not require third-party certification.