Control A.9 in ISO/IEC 42001:2023 addresses the use of AI systems. It requires organizations to ensure AI systems are used in accordance with defined objectives and aligned with ethical principles, intended use, and applicable controls. Auditors must evaluate whether processes exist for the responsible use of AI and confirm that implementation aligns with those objectives.
Option A is related more to third-party agreements (Control A.6), and Option C refers to traceability (Control A.7 or A.13).
[Reference:, ISO/IEC 42001:2023, Annex A, Control A.9 – Use of AI Systems, PECB ISO/IEC 42001 Lead Auditor Study Guide – Section: Verifying Responsible Use of AI, , \===========, ]
Submit