ISO/IEC FDIS 42105 · stage 50.20 FDIS ballot closes 21 October 2026 Planning date 16 Feb 2027, our estimate Official record
OHISO 42105 Revision CheckerHuman oversight of AI systems, before publication

Home / Themes

Six ways to read the register

The themes behind human oversight

A governance lead does not read 47 controls in a line. They start with the question they have to answer. These six themes are the questions, and every unit belongs to one.

01The six

Choose the question you have to answer

T1 · 14 unitsAccountability

The people, roles and authorities that make oversight real. This theme covers the policy, the role definitions, the competence, the escalation route and the third parties.

Can you name the person who can stop the system, and the person who answers for it?

Read the theme
T2 · 8 unitsImpact

The assessment of consequences that gives oversight its purpose. This theme covers the impact process, the affected parties, the thresholds, the societal view and the information the operator needs about limits.

Does the file name the people the system can harm, and the harm the overseer is watching for?

Read the theme
T3 · 8 unitsLife cycle

The oversight controls that run through the system's life. This theme covers risk assessment, operational control, verification and validation, live monitoring, logging and disengagement.

Is oversight designed in, tested before release, and still exercisable at production volume?

Read the theme
T4 · 6 unitsInformation

The information without which oversight is guesswork. This theme covers user information, incident communication, interested-party reporting, transparency and the instructions that travel with the system.

Does the person at the screen know what the system cannot do, and what to do when it fails?

Read the theme
T5 · 6 unitsUse

The controls at the point of use. This theme covers responsible-use approval, intended use, the oversight duty in law, explainability and the review of whether the assessment still holds.

Is the system used as intended, by competent people, with a real ability to refuse its output?

Read the theme
T6 · 5 unitsAssurance

The evidence that the oversight works. This theme covers monitoring and measurement, internal audit, nonconformity and corrective action, continual improvement and post-market monitoring.

Could you prove to an auditor that oversight operated last quarter, with dates and names?

Read the theme
02The order

The order that works

Most first registers start with the policy and stop there. The order that survives an audit is: name the systems and the roles, write the policy and the role authority, set the impact and the thresholds, design the information and the override, keep the logs and measure, then review and correct. The six themes follow that order, from accountability through impact, life cycle, information and use to assurance.

If you have one week, do accountability and impact. If you have a quarter, do all six. If you have a board pack due, do accountability and information, because those are the two an auditor can test in an afternoon.

03The register

All 47 units, by theme

The register, grouped by theme, 47 units
RefOversight unitThemeHeld citationEvidence
OH-01Context and the role you playAccountabilityISO/IEC 42001:2023, 4.13
OH-02What the management system coversAccountabilityISO/IEC 42001:2023, 4.33
OH-03The AI policyAccountabilityISO/IEC 42001:2023, 5.23
OH-04Roles, responsibilities and authoritiesAccountabilityISO/IEC 42001:2023, 5.33
OH-05AI risk assessmentLife cycleISO/IEC 42001:2023, 6.1.23
OH-06Impact assessment at planningImpactISO/IEC 42001:2023, 6.1.43
OH-07AI objectives and plansAccountabilityISO/IEC 42001:2023, 6.23
OH-08Competence of the overseerUseISO/IEC 42001:2023, 7.23
OH-09Awareness of the policyAccountabilityISO/IEC 42001:2023, 7.33
OH-10Documented informationInformationISO/IEC 42001:2023, 7.53
OH-11Operational planning and controlLife cycleISO/IEC 42001:2023, 8.13
OH-12Impact assessment in operationImpactISO/IEC 42001:2023, 8.43
OH-13Monitoring and measurementAssuranceISO/IEC 42001:2023, 9.13
OH-14Internal auditAssuranceISO/IEC 42001:2023, 9.23
OH-15Management reviewAccountabilityISO/IEC 42001:2023, 9.33
OH-16Continual improvementAssuranceISO/IEC 42001:2023, 10.13
OH-17Nonconformity and corrective actionAssuranceISO/IEC 42001:2023, 10.23
OH-18AI roles and responsibilitiesAccountabilityISO/IEC 42001:2023, A.3.23
OH-19Reporting of concernsAccountabilityISO/IEC 42001:2023, A.3.33
OH-20Human resources for AIAccountabilityISO/IEC 42001:2023, A.4.63
OH-21The impact assessment processImpactISO/IEC 42001:2023, A.5.23
OH-22Impact on individuals and groupsImpactISO/IEC 42001:2023, A.5.43
OH-23Societal impactsImpactISO/IEC 42001:2023, A.5.53
OH-24Verification and validationLife cycleISO/IEC 42001:2023, A.6.2.43
OH-25Operation and monitoringLife cycleISO/IEC 42001:2023, A.6.2.63
OH-26Event logsLife cycleISO/IEC 42001:2023, A.6.2.83
OH-27Information for usersInformationISO/IEC 42001:2023, A.8.23
OH-28Communicating incidentsInformationISO/IEC 42001:2023, A.8.43
OH-29Information for interested partiesInformationISO/IEC 42001:2023, A.8.53
OH-30Responsible useUseISO/IEC 42001:2023, A.9.23
OH-31Intended useUseISO/IEC 42001:2023, A.9.43
OH-32Allocating responsibilities with third partiesAccountabilityISO/IEC 42001:2023, A.10.23
OH-33Assessment responsibilitiesAccountabilityISO/IEC 42005:2025, 5.63
OH-34Thresholds for sensitive and restricted usesImpactISO/IEC 42005:2025, 5.73
OH-35Performing the assessmentImpactISO/IEC 42005:2025, 5.83
OH-36Approval of the assessmentLife cycleISO/IEC 42005:2025, 5.113
OH-37Monitoring and review of the assessmentUseISO/IEC 42005:2025, 5.123
OH-38ExplainabilityUseISO/IEC 42005:2025, 6.8.2.83
OH-39Human oversight in the EU AI ActUseEU AI Act, Article 143
OH-40Deployer obligationsAccountabilityEU AI Act, Article 264
OH-41Transparency to deployersInformationEU AI Act, Article 133
OH-42Record-keeping and logsInformationEU AI Act, Article 123
OH-43Post-market monitoringAssuranceEU AI Act, Article 723
OH-44Roles in the human-AI configurationAccountabilityNIST AI RMF 1.0, GV-3.23
OH-45Knowledge limits and oversight informationImpactNIST AI RMF 1.0, MP-2.23
OH-46Oversight processes defined and assessedLife cycleNIST AI RMF 1.0, MP-3.53
OH-47Disengage or deactivate the systemLife cycleNIST AI RMF 1.0, MN-2.43

The human oversight kit, USD 799 one off.

The 47-unit register, the 142-item evidence index, the 120-day plan and the gap questions, as PDF, CSV and XLSX. Five labelled rows are free on the specimen page.

Buy the kit, USD 799 Open the free specimen