prEN 18228

AI Risk Management

General information

40.60   Close of voting   Jul 30, 2026

CEN/CENELEC

CEN/CLC/JTC 21

European Norm

35.240.01   Application of information technology in general

Scope

This document specifies requirements and provides guidance for risk management of AI systems. It specifies terminology, principles and a process for risk management.
The process described in this document intends to assist providers of AI systems to identify the hazards associated with the AI systems, to estimate and evaluate the associated risks, to control these risks, and to monitor the effectiveness of the controls. The process described in this document applies to risks to health, safety and fundamental rights associated with an AI system. The process described in this document is applied throughout the life cycle of the AI system.
This document requires providers to establish objective criteria for risk acceptability but does not specify acceptable risk levels.
This document is intended for use by organizations providing AI systems, regardless of their size, nature or location. This document is not intended for managing risk faced by organizations. This document is intended to support the organization in meeting applicable regulatory requirements.

Related legislation

Legislation related to this standard

2024/1689

Life cycle

NOW

IN_DEVELOPMENT
prEN 18228
40.60 Close of voting
Jul 30, 2026