# ISO 42105 Revision Checker

> The free public record and scope check for ISO/IEC FDIS 42105, Information technology, Artificial intelligence, Guidance for human oversight of AI systems. ISO records it at stage 50.20, the FDIS ballot, dated 26 August 2026, 29 pages, edition 1, committee ISO/IEC JTC 1/SC 42. ISO has announced no publication date; the planning date 16 February 2027 is our estimate from the stage record.

## What this is

A free reference and a paid document set for AI governance leads and ISO/IEC 42001 implementers. The site states the public ISO record, a 47-unit human oversight register drawn from held ISO/IEC 42001:2023, ISO/IEC 42005:2025, EU AI Act and NIST AI RMF 1.0 clauses in our own words, a free scope and date check, a USD 799 one-off kit and a USD 49 a month change watch.

The FDIS body is not public. The site does not state FDIS clause numbers, clause headings or quotations. It says so on every unit page.

## Key facts

- Designation: ISO/IEC FDIS 42105, Edition 1
- Title: Information technology, Artificial intelligence, Guidance for human oversight of AI systems
- Committee: ISO/IEC JTC 1/SC 42, Artificial intelligence
- ICS: 35.240.01
- Pages: 29
- Status: Under development, stage 50.20, Proof sent to secretariat or FDIS ballot initiated: 8 weeks
- Stage date: 26 August 2026
- FDIS ballot: 8 weeks from 2026-08-26, closing 21 October 2026 by our arithmetic
- Planning date: 16 February 2027, our estimate from stage 50.20
- Kit: USD 799 one off
- Watch: USD 49 a month
- Register: 47 units, 142 evidence items, 102 common gaps
- Last updated: 2026-10-21

## Free pages

- [Home](https://iso-42105-revision-checker.theartofservice.com/)
- [Publication record](https://iso-42105-revision-checker.theartofservice.com/publication/)
- [The 47-unit register](https://iso-42105-revision-checker.theartofservice.com/register/)
- [Themes](https://iso-42105-revision-checker.theartofservice.com/themes/)
- [Defined terms](https://iso-42105-revision-checker.theartofservice.com/definitions/)
- [Free scope and date check](https://iso-42105-revision-checker.theartofservice.com/scope/)
- [Rules by market](https://iso-42105-revision-checker.theartofservice.com/rules/)
- [Answers](https://iso-42105-revision-checker.theartofservice.com/answers/)
- [About](https://iso-42105-revision-checker.theartofservice.com/about/)
- [Method](https://iso-42105-revision-checker.theartofservice.com/methodology/)
- [Sources](https://iso-42105-revision-checker.theartofservice.com/sources/)

## Themes

- [Accountability](https://iso-42105-revision-checker.theartofservice.com/themes/accountability/): 14 units. Can you name the person who can stop the system, and the person who answers for it?
- [Impact](https://iso-42105-revision-checker.theartofservice.com/themes/impact/): 8 units. Does the file name the people the system can harm, and the harm the overseer is watching for?
- [Life cycle](https://iso-42105-revision-checker.theartofservice.com/themes/lifecycle/): 8 units. Is oversight designed in, tested before release, and still exercisable at production volume?
- [Information](https://iso-42105-revision-checker.theartofservice.com/themes/information/): 6 units. Does the person at the screen know what the system cannot do, and what to do when it fails?
- [Use](https://iso-42105-revision-checker.theartofservice.com/themes/use/): 6 units. Is the system used as intended, by competent people, with a real ability to refuse its output?
- [Assurance](https://iso-42105-revision-checker.theartofservice.com/themes/assurance/): 5 units. Could you prove to an auditor that oversight operated last quarter, with dates and names?

## The units

- [OH-01 Context and the role you play](https://iso-42105-revision-checker.theartofservice.com/register/oh-01-context-and-the-role-you-play/): ISO/IEC 42001:2023, 4.1. Work out the internal and external issues that affect whether the AI management system can do what it is meant to, and settle which role the organization plays for each AI system: provider, producer, customer, partner or subject. The role determines which duties follow.
- [OH-02 What the management system covers](https://iso-42105-revision-checker.theartofservice.com/register/oh-02-what-the-management-system-covers/): ISO/IEC 42001:2023, 4.3. Set the boundaries and applicability of the AI management system, and keep the scope as documented information. The scope fixes which activities the management-system requirements cover, and it must be traceable to the context analysis.
- [OH-03 The AI policy](https://iso-42105-revision-checker.theartofservice.com/register/oh-03-the-ai-policy/): ISO/IEC 42001:2023, 5.2. Top management must set an AI policy suited to the organization's purpose that gives a framework for objectives, commits to meeting applicable requirements and commits to continual improvement. It must be documented, communicated and available to interested parties where suitable.
- [OH-04 Roles, responsibilities and authorities](https://iso-42105-revision-checker.theartofservice.com/register/oh-04-roles-responsibilities-and-authorities/): ISO/IEC 42001:2023, 5.3. Top management must allocate responsibilities and authorities, make them known, and assign responsibility for keeping the management system conformant and for reporting its performance to top management.
- [OH-05 AI risk assessment](https://iso-42105-revision-checker.theartofservice.com/register/oh-05-ai-risk-assessment/): ISO/IEC 42001:2023, 6.1.2. Run a defined process for assessing AI risk that follows the policy and objectives, gives comparable results when repeated, identifies risks to the objectives, and analyses consequences for the organization, individuals and society, with realistic likelihood where applicable.
- [OH-06 Impact assessment at planning](https://iso-42105-revision-checker.theartofservice.com/register/oh-06-impact-assessment-at-planning/): ISO/IEC 42001:2023, 6.1.4. Set out how the organization will assess the consequences of developing, providing or using AI systems for individuals, groups and society. The assessment must cover intended use, reasonably foreseeable misuse, the technical and societal context and the applicable jurisdictions, and it must be documented.
- [OH-07 AI objectives and plans](https://iso-42105-revision-checker.theartofservice.com/register/oh-07-ai-objectives-and-plans/): ISO/IEC 42001:2023, 6.2. Set AI objectives for the relevant functions and levels that are consistent with the policy, measurable where practicable, monitored, communicated and updated. Plan what will be done, with what resources, by whom, by when and how results will be evaluated.
- [OH-08 Competence of the overseer](https://iso-42105-revision-checker.theartofservice.com/register/oh-08-competence-of-the-overseer/): ISO/IEC 42001:2023, 7.2. Determine the competence needed by people whose work affects AI performance, make sure they are competent through education, training or experience, act to close gaps, and evaluate whether the action worked. Keep documented evidence.
- [OH-09 Awareness of the policy](https://iso-42105-revision-checker.theartofservice.com/register/oh-09-awareness-of-the-policy/): ISO/IEC 42001:2023, 7.3. People working under the organization's control must know the AI policy, how they contribute to the management system's effectiveness, and what follows from not conforming to its requirements.
- [OH-10 Documented information](https://iso-42105-revision-checker.theartofservice.com/register/oh-10-documented-information/): ISO/IEC 42001:2023, 7.5. Define what documented information the management system includes, how it is created and updated, and how it is controlled: available where needed, protected, versioned and retained.
- [OH-11 Operational planning and control](https://iso-42105-revision-checker.theartofservice.com/register/oh-11-operational-planning-and-control/): ISO/IEC 42001:2023, 8.1. Plan the processes needed to meet requirements, run them under control, set process criteria, implement the chosen controls and monitor their effectiveness. Keep documented information sufficient to show the processes were carried out as planned.
- [OH-12 Impact assessment in operation](https://iso-42105-revision-checker.theartofservice.com/register/oh-12-impact-assessment-in-operation/): ISO/IEC 42001:2023, 8.4. Carry out impact assessments on the planned basis at scheduled intervals and whenever a significant change is proposed, and keep the documented results of every assessment.
- [OH-13 Monitoring and measurement](https://iso-42105-revision-checker.theartofservice.com/register/oh-13-monitoring-and-measurement/): ISO/IEC 42001:2023, 9.1. Decide what to monitor and measure, the methods that give valid results, when monitoring and measurement happen, and when results are analysed and evaluated. Keep evidence of the results and evaluate the performance and effectiveness of the management system.
- [OH-14 Internal audit](https://iso-42105-revision-checker.theartofservice.com/register/oh-14-internal-audit/): ISO/IEC 42001:2023, 9.2. Audit at planned intervals against the organization's own requirements and the standard, through an audit programme that covers the scope, the criteria, the auditors and the reporting.
- [OH-15 Management review](https://iso-42105-revision-checker.theartofservice.com/register/oh-15-management-review/): ISO/IEC 42001:2023, 9.3. Top management must review the management system at planned intervals, with the required inputs, and record the decisions and actions that follow.
- [OH-16 Continual improvement](https://iso-42105-revision-checker.theartofservice.com/register/oh-16-continual-improvement/): ISO/IEC 42001:2023, 10.1. Keep making the management system more suitable, adequate and effective, and record the improvements and their effect.
- [OH-17 Nonconformity and corrective action](https://iso-42105-revision-checker.theartofservice.com/register/oh-17-nonconformity-and-corrective-action/): ISO/IEC 42001:2023, 10.2. When a nonconformity occurs, control and correct it, deal with the consequences, find the cause, check for similar cases, implement the action and review its effectiveness. Corrective action must fit the effects.
- [OH-18 AI roles and responsibilities](https://iso-42105-revision-checker.theartofservice.com/register/oh-18-ai-roles-and-responsibilities/): ISO/IEC 42001:2023, A.3.2. Define and allocate AI roles and responsibilities according to the organization's needs, covering human oversight, security, privacy, safety, performance, development, suppliers, legal compliance, data quality, assets, impact assessment and risk management.
- [OH-19 Reporting of concerns](https://iso-42105-revision-checker.theartofservice.com/register/oh-19-reporting-of-concerns/): ISO/IEC 42001:2023, A.3.3. Define and operate a process for people to raise concerns about what the organization does in relation to an AI system at any point in its life cycle, with a route to investigation and escalation.
- [OH-20 Human resources for AI](https://iso-42105-revision-checker.theartofservice.com/register/oh-20-human-resources-for-ai/): ISO/IEC 42001:2023, A.4.6. Record the people and competences used for building, deploying, running, changing, maintaining, transferring and retiring the AI system, and for integrating and verifying it, with diverse expertise considered.
- [OH-21 The impact assessment process](https://iso-42105-revision-checker.theartofservice.com/register/oh-21-the-impact-assessment-process/): ISO/IEC 42001:2023, A.5.2. Put in place a way of assessing what an AI system could mean for individuals, groups and society across its life cycle, with triggers for when an assessment is required and steps for identification, analysis, evaluation, treatment and communication.
- [OH-22 Impact on individuals and groups](https://iso-42105-revision-checker.theartofservice.com/register/oh-22-impact-on-individuals-and-groups/): ISO/IEC 42001:2023, A.5.4. Evaluate and record how the system could affect individuals or groups over its life cycle, covering human rights, accessibility, financial consequences, health and safety, privacy and security, explainability, accountability and fairness, and considering vulnerable groups.
- [OH-23 Societal impacts](https://iso-42105-revision-checker.theartofservice.com/register/oh-23-societal-impacts/): ISO/IEC 42001:2023, A.5.5. Evaluate and record the possible effects of the organization's AI systems on society over their life cycle, including environmental sustainability, economic effects, democratic processes, health and safety, norms and culture, and misuse.
- [OH-24 Verification and validation](https://iso-42105-revision-checker.theartofservice.com/register/oh-24-verification-and-validation/): ISO/IEC 42001:2023, A.6.2.4. Set out in writing how the system will be verified and validated and the criteria for each measure, including representative test data, acceptable error rates, reliability and safety requirements, responsible-AI objectives and operational ranges.
- [OH-25 Operation and monitoring](https://iso-42105-revision-checker.theartofservice.com/register/oh-25-operation-and-monitoring/): ISO/IEC 42001:2023, A.6.2.6. Define and document what the system needs for ongoing operation, at minimum monitoring of the system and its performance, repair, updating and support.
- [OH-26 Event logs](https://iso-42105-revision-checker.theartofservice.com/register/oh-26-event-logs/): ISO/IEC 42001:2023, A.6.2.8. Decide in which life-cycle phases the system records event logs, and make sure it records at least while it is in use, with enough content to support traceability and to detect operation outside the intended conditions.
- [OH-27 Information for users](https://iso-42105-revision-checker.theartofservice.com/register/oh-27-information-for-users/): ISO/IEC 42001:2023, A.8.2. Determine what information users need and provide it: purpose, that the user is dealing with AI, how to interact and override, technical requirements and limits, oversight needs, accuracy, impact findings, updates, contacts and training material.
- [OH-28 Communicating incidents](https://iso-42105-revision-checker.theartofservice.com/register/oh-28-communicating-incidents/): ISO/IEC 42001:2023, A.8.4. Work out and write down how incidents will be communicated to the people using the system, and analyse the notification obligations, including AI-specific cases such as personal data breaches in training data.
- [OH-29 Information for interested parties](https://iso-42105-revision-checker.theartofservice.com/register/oh-29-information-for-interested-parties/): ISO/IEC 42001:2023, A.8.5. Identify and record what the organization is obliged to tell interested parties about the system, including regulators, customers and others, with the timeframes and the records of what was shared.
- [OH-30 Responsible use](https://iso-42105-revision-checker.theartofservice.com/register/oh-30-responsible-use/): ISO/IEC 42001:2023, A.9.2. Set out in writing how the organization makes sure AI systems are used responsibly, covering approvals, cost including monitoring and maintenance, approved sourcing and applicable legal requirements, for internally built and third-party systems.
- [OH-31 Intended use](https://iso-42105-revision-checker.theartofservice.com/register/oh-31-intended-use/): ISO/IEC 42001:2023, A.9.4. Make sure the system is used in line with its intended uses and its documentation, including the input conditions and the operating context the provider specifies.
- [OH-32 Allocating responsibilities with third parties](https://iso-42105-revision-checker.theartofservice.com/register/oh-32-allocating-responsibilities-with-third-parties/): ISO/IEC 42001:2023, A.10.2. Make sure responsibilities across the life cycle are divided among the organization, suppliers, partners, customers and other third parties, and record the allocation in the contracts.
- [OH-33 Assessment responsibilities](https://iso-42105-revision-checker.theartofservice.com/register/oh-33-assessment-responsibilities/): ISO/IEC 42005:2025, 5.6. Assign and make known the responsibilities for the impact assessment, including setting the scope, securing resources, providing the documented information, involving the right disciplines and approving the result.
- [OH-34 Thresholds for sensitive and restricted uses](https://iso-42105-revision-checker.theartofservice.com/register/oh-34-thresholds-for-sensitive-and-restricted-uses/): ISO/IEC 42005:2025, 5.7. Set documented thresholds for how an AI system may be used, covering the sensitive cases, the restricted cases and the impact scale, taking account of law, interested-party expectations, the state of the art, benefits, cultural and labour norms and the applicable ethical frameworks.
- [OH-35 Performing the assessment](https://iso-42105-revision-checker.theartofservice.com/register/oh-35-performing-the-assessment/): ISO/IEC 42005:2025, 5.8. Carry out the assessment by identifying the reasonably foreseeable impacts on everyone affected, counting benefits as well as harms, estimating magnitude and likelihood, choosing a response and recording the input from affected parties.
- [OH-36 Approval of the assessment](https://iso-42105-revision-checker.theartofservice.com/register/oh-36-approval-of-the-assessment/): ISO/IEC 42005:2025, 5.11. Record every approval, authorisation and sign-off the assessment process requires, including any exceedance of a threshold and the final approval of the results, with the decision authority named by decision type.
- [OH-37 Monitoring and review of the assessment](https://iso-42105-revision-checker.theartofservice.com/register/oh-37-monitoring-and-review-of-the-assessment/): ISO/IEC 42005:2025, 5.12. Set and document how assessments are monitored and revised: frequency, trigger events, the responsible person and what the review covers, with outputs that decide changes to the process, the risk treatment, the objectives or the thresholds.
- [OH-38 Explainability](https://iso-42105-revision-checker.theartofservice.com/register/oh-38-explainability/): ISO/IEC 42005:2025, 6.8.2.8. Analyse, for each interested party, the benefits and harms tied to explainability: whether the person can understand the important factors behind a result, and what follows when the explanation is missing or wrong.
- [OH-39 Human oversight in the EU AI Act](https://iso-42105-revision-checker.theartofservice.com/register/oh-39-human-oversight-in-the-eu-ai-act/): EU AI Act, Article 14. High-risk AI systems must be designed so that natural persons can effectively oversee them during use. The oversight must let the person understand the system's capacities and limits, monitor it, remain aware of automation bias, interpret the output, decide not to use it, override or reverse it, and intervene or stop the system.
- [OH-40 Deployer obligations](https://iso-42105-revision-checker.theartofservice.com/register/oh-40-deployer-obligations/): EU AI Act, Article 26. Deployers of high-risk systems must use them in line with the instructions, assign oversight to competent people, ensure input data is relevant and representative, monitor operation, inform the provider of risks and incidents, keep logs for at least six months, inform workers and complete a data protection impact assessment where required.
- [OH-41 Transparency to deployers](https://iso-42105-revision-checker.theartofservice.com/register/oh-41-transparency-to-deployers/): EU AI Act, Article 13. High-risk systems must be sufficiently transparent for deployers to interpret the output and use it appropriately. The instructions must cover the intended purpose, accuracy, robustness, cybersecurity, foreseeable misuse, performance, oversight measures and the technical conditions of use.
- [OH-42 Record-keeping and logs](https://iso-42105-revision-checker.theartofservice.com/register/oh-42-record-keeping-and-logs/): EU AI Act, Article 12. High-risk systems must technically allow automatic recording of events over the lifetime of the system, with traceability appropriate to the intended purpose. For remote biometric identification, the log must include the period of use, the reference database, the input that led to a match and the people involved.
- [OH-43 Post-market monitoring](https://iso-42105-revision-checker.theartofservice.com/register/oh-43-post-market-monitoring/): EU AI Act, Article 72. Providers must set up and document a system for monitoring the system after it is placed on the market, proportionate to the technology and the risks, collecting and analysing performance data throughout the lifetime, including data supplied by deployers, and use it to evaluate compliance.
- [OH-44 Roles in the human-AI configuration](https://iso-42105-revision-checker.theartofservice.com/register/oh-44-roles-in-the-human-ai-configuration/): NIST AI RMF 1.0, GV-3.2. Policies and procedures define and differentiate the roles and responsibilities for human-AI configurations and oversight: operator, reviewer, overseer and affected party, with what each may and must do about the output.
- [OH-45 Knowledge limits and oversight information](https://iso-42105-revision-checker.theartofservice.com/register/oh-45-knowledge-limits-and-oversight-information/): NIST AI RMF 1.0, MP-2.2. Document the system's knowledge limits and how its output may be used and overseen by humans, in enough detail for a downstream actor to make an informed decision.
- [OH-46 Oversight processes defined and assessed](https://iso-42105-revision-checker.theartofservice.com/register/oh-46-oversight-processes-defined-and-assessed/): NIST AI RMF 1.0, MP-3.5. Define, assess and document the human oversight process for the system in line with the governing policy, and assess whether the oversight is exercisable at the pace and volume of operation.
- [OH-47 Disengage or deactivate the system](https://iso-42105-revision-checker.theartofservice.com/register/oh-47-disengage-or-deactivate-the-system/): NIST AI RMF 1.0, MN-2.4. Put in place and apply mechanisms, with assigned and understood responsibilities, to supersede, disengage or deactivate a system that performs inconsistently with its intended use, and test that the mechanism works.

## Prices

- Human oversight kit: USD 799 one off. The register, evidence index, 120-day plan and board brief, as PDF, CSV and XLSX.
- Change watch: USD 49 a month. An email when the ISO stage, stage date, title, committee, ICS, page count or record hash changes, with the diff.

## Limits

Not legal advice; does not certify. Not affiliated with, endorsed by or approved by ISO, the IEC, the EU or NIST. The FDIS is guidance, not a certifiable requirements standard. ISO/IEC TS 8200 is named but not held. The planning date is our estimate, not an ISO announcement.

## Contact

support@theartofservice.com. The Art of Service Pty Ltd, Brisbane, Queensland, Australia. Author: Gerard Blokdyk.