prEN XXX

AI Risk Management

Scope

This document specifies requirements on risk management for AI systems. This document also provides clear and actionable guidance on how risk can be addressed and mitigated throughout the entire lifecycle of the AI system. It applies to risk management for a broad range of products and services which use AI technology, including explicit considerations for vulnerable people. Risks covered include both risks to health and safety and risks to fundamental rights which can arise from AI systems, with impact for individuals, organisations, market and society. This document also defines methods that can be used to determine if a package of risk management measures associated with an AI system will be able to ensure that certain risks arising from that product or system are identified, monitored, and managed, leading to an acceptable level of risk.

This document is intended for use by organizations and individuals providing, using, or being affected by products or services that use AI technology, no matter what their size, nature, or location is. The included requirements and guidance have however been specifically tailored to support organisations and individuals who operate inside of the European Union, as well as organisations and individuals outside of the Union who are active in the European Union market or who intend to enter that market. They have been tailored to support these organisations and individuals in meeting applicable regulatory requirements, with the flexibility to accommodate additional expectations from parties they may interact with