ISO/IEC 42001:2023, 6.2

AI objectives and plans

Unit OH-07 in the Accountability theme. The held citation is ISO/IEC 42001:2023, 6.2, and the row asks for 3 pieces of evidence.

At a glance

Ref: OH-07
Theme: Accountability
Held source: ISO/IEC 42001:2023
Citation: ISO/IEC 42001:2023, 6.2
Evidence: 3 items
Gaps: 2 common

Evidence to keep

AI objectives and plansAn objectives register with measures
AI objectives and plansPlans with actions, resources, owners, dates and evaluation method
AI objectives and plansMonitoring results for each objective

Questions before you sign

Which objective makes oversight measurable?
Who owns it and when is it reviewed?
What result would show it failed?

The requirement, in our words

Set AI objectives for the relevant functions and levels that are consistent with the policy, measurable where practicable, monitored, communicated and updated. Plan what will be done, with what resources, by whom, by when and how results will be evaluated.

What it means for human oversight

An oversight objective should be measurable: response time, override rate, review completion, training coverage. An objective stated as a aspiration with no owner cannot be reviewed.

How to evidence it

Attach the artefacts above to the AI objectives and plans row with the system name, the owner and the date. The first one is the anchor: An objectives register with measures. The OH-07 file is complete when the named person can produce that artefact and explain the decision it records, without asking someone else where it is.

The reviewer will sample one live decision and ask for Plans with actions, resources, owners, dates and evaluation method. If that artefact for OH-07 cannot be produced, the row is a gap, whatever the policy says.

OH-07 carries 3 evidence items and 2 common gaps. For ai objectives and plans, the auditor looks for a named person with an authority, not a committee title, so the row needs both the name and the sentence that grants the power. The OH-07 statement above is ours, written from ISO/IEC 42001:2023, 6.2, not a reproduction of the licensed text.

Common gaps

Objectives stated as aspirations with no measure or owner
Objectives not updated after a change in context

Where the FDIS fits. The public abstract says the draft applies to all types of organizations across the AI system life cycle, so ai objectives and plans is one of the places the guidance is expected to operate. For OH-07, the FDIS clause numbering and wording are not public, so this page cites ISO/IEC 42001:2023, 6.2 above and does not quote the draft.

Related units

Source for this page: ISO/IEC 42001:2023, 6.2. Open ISO/IEC 42001:2023, 6.2 and compare it with the OH-07 statement above. Retrieved 2026-10-21.