ISO/IEC 27001:2022 — Information Security Management Systems
STANDARD
CYBERSECURITY
The premier global standard specifying requirements for building and maintaining an Information Security Management System.
STANDARD
AI GOVERNANCE
ISO/IEC 22989:2022 — AI Concepts and Terminology
An international standard that establishes terminology and describes concepts used across artificial intelligence technologies and applications.
BUSINESS RELEVANCE
A controlled vocabulary reduces ambiguity in policies, contracts, inventories, risk assessments, and system documentation, particularly when multidisciplinary teams use the same words differently.
IMPLEMENTATION EXAMPLE
An organization aligns its AI policy, system inventory, supplier questionnaire, and impact-assessment template with ISO/IEC 22989 terminology to prevent inconsistent classification.
LIMITATIONS
Terminology standards improve consistency but do not specify controls, certify systems, or settle every emerging usage. New concepts such as generative AI may be addressed through later amendments or complementary standards.
TECHNICAL EXPLANATION
The standard provides a shared vocabulary for AI, including concepts related to systems, models, data, learning, capabilities, stakeholders, and lifecycle activities. Consistent terminology supports communication across technical, governance, procurement, assurance, and regulatory work.
Secondary Topics
Intelligent Automation, Systems Architecture
Sources
ISO — ISO/IEC 22989:2022 — https://www.iso.org/standard/74296.html
Related terms
Passkeys
STANDARD
CYBERSECURITY
Passwordless credentials that use public-key cryptography bound to one website, so sign-ins resist phishing and leave no shared secret for attackers to steal.
ISO/IEC TR 24368:2022 — Information technology — Artificial intelligence — Overview of ethical and societal concerns
STANDARD
AI GOVERNANCE
A technical report examining ethical and societal concerns, human rights, and governance considerations in artificial intelligence.
ISO/IEC 42006 — Information technology — Artificial intelligence — Requirements for bodies providing audit and certification of artificial intelligence management systems
STANDARD
AI GOVERNANCE
An international standard specifying competence and audit requirements for bodies certifying AI management systems under ISO/IEC 42001.
ISO/IEC 25059:2023 — Quality requirements and evaluation for AI systems
STANDARD
AI GOVERNANCE
An international standard defining a quality model whose characteristics are used to specify, measure, and evaluate the quality of AI systems.