A.5.2 AI system impact assessment process
Setting up the process for assessing the potential consequences of AI systems for individuals, groups and societies across the life cycle: triggers, methods, thresholds and how it feeds risk treatment.

The four Annex A controls for AI system impact assessment: the assessment process, its documentation, and the separate assessment of impacts on individuals or groups and on society.
Setting up the process for assessing the potential consequences of AI systems for individuals, groups and societies across the life cycle: triggers, methods, thresholds and how it feeds risk treatment.
Recording the results of AI system impact assessments and keeping them for a defined retention period: what the record contains, who approves it and how it is updated.
Assessing and documenting how an AI system could affect individuals or groups of individuals across its life cycle, including fairness, bias and transparency concerns, as distinct from societal-level impacts in A.5.5.
Assessing and documenting the potential societal impacts of an AI system across its life cycle, such as environmental, economic or public-interest effects, beyond the individual-level assessment in A.5.4.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.