Based on ISO/IEC 42001, which of the following is NOT one of the factors that an organization must consider when determining the risks and opportunities related to an AI system?

Question

Options

• AThe intended use of the AI system
• BThe domain and application context of the AI system
• CThe specific algorithms used to develop the AI system

• A
  20% (4)
• B
  5% (1)
• C
  75% (15)

Explanation

According to Clause 6.1.1 and 6.1.2 of ISO/IEC 42001:2023, when determining risks and opportunities, an organization must consider: The intended use of the AI system The domain (industry/field) and application context External and internal issues Stakeholder expectations and compliance obligations However, the specific algorithms used (e.g., neural networks, decision trees, etc.) are not explicitly mandated as a factor for risk determination under these clauses. Algorithm selection may influence risk indirectly but is considered part of technical implementation, not a direct requirement under ISO/IEC 42001's risk-based planning. Thus, Option C is the correct answer -- it's not a primary or required factor listed in the standard's risk identification process.

No community discussion yet for this question.