At a glance
- Ref
- OH-20
- Theme
- Accountability
- Held source
- ISO/IEC 42001:2023
- Citation
- ISO/IEC 42001:2023, A.4.6
- Evidence
- 3 items
- Gaps
- 2 common
Evidence to keep
- Human resources for AIStaffing and competence records per life-cycle activity
- Human resources for AIEvidence diverse expertise was considered, including human oversight
- Human resources for AIAllocated time for the oversight role
Questions before you sign
- Who is the overseer for this system, and how much time do they have?
- Is oversight resourced at transfer and retirement?
- Is the expertise diverse enough to challenge the system?
The requirement, in our words
Record the people and competences used for building, deploying, running, changing, maintaining, transferring and retiring the AI system, and for integrating and verifying it, with diverse expertise considered.
What it means for human oversight
Oversight must be resourced as a life-cycle activity, including at decommissioning and transfer. A named overseer with no allocated hours is a role on paper.
How to evidence it
Attach the artefacts above to the Human resources for AI row with the system name, the owner and the date. The first one is the anchor: Staffing and competence records per life-cycle activity. The OH-20 file is complete when the named person can produce that artefact and explain the decision it records, without asking someone else where it is.
The reviewer will sample one live decision and ask for Evidence diverse expertise was considered, including human oversight. If that artefact for OH-20 cannot be produced, the row is a gap, whatever the policy says.
OH-20 carries 3 evidence items and 2 common gaps. For human resources for ai, the auditor looks for a named person with an authority, not a committee title, so the row needs both the name and the sentence that grants the power. The OH-20 statement above is ours, written from ISO/IEC 42001:2023, A.4.6, not a reproduction of the licensed text.
Common gaps
- No competence recorded for decommissioning or transfer
- Human oversight roles not resourced
Related units
Source for this page: ISO/IEC 42001:2023, A.4.6. Open ISO/IEC 42001:2023, A.4.6 and compare it with the OH-20 statement above. Retrieved 2026-10-21.