Curated official sources for compliance officers covering the canonical ISO/IEC 23894:2023 risk-management guidance, related AI management-system and governance standards, and complementary NIST and OECD implementation materials. ISO standards are standards publications, while NIST and OECD materials are generally guidance rather than legal obligations.
Start with ISO/IEC 23894:2023, the official record for AI risk-management guidance. Related ISO/IEC records provide adjacent management-system, governance, and AI-impact-assessment context; consult the individual record for publication and access status.
NIST’s AI Risk Management Framework is voluntary guidance organized around GOVERN, MAP, MEASURE, and MANAGE, with supporting material for documenting risks, responsibilities, controls, and outcomes.[[cite:5]][[cite:6]][[cite:7]] The ISO crosswalk is a useful complementary comparison, but the retrieved record identifies it as a draft for comment.
These institutional sources support governance mapping, risk and accountability work, and operational implementation. The OECD AI Governance Playbook is intended for executives and practitioners, including compliance officers, while the AI Principles are high-level and flexible rather than a detailed compliance procedure.[[cite:14]][[cite:15]][[cite:16]][[cite:17]] The OECD company-focused due-diligence guidance described in the risk and accountability material was still in development in the retrieved source.[[cite:18]][[cite:19]]
Create your account to keep this answer and continue from it later.
Let's look at alternatives: