ISO/IEC 42005: Conducting an AI System Impact Assessment (1 day)

• Setting the scene: what ISO/IEC 42005 is, why impact assessment matters, and how it fits with ISO/IEC 42001, AI risk management and DPIAs
• Planning the assessment: deciding when an assessment is needed, setting scope, assigning responsibilities and establishing thresholds for significant impact
• Describing the AI system: capturing intended purpose, functionality, data, deployment context and reasonably foreseeable misuse
• Identifying who is affected: mapping individuals, groups and wider society, and engaging stakeholders appropriately
• Assessing impacts: identifying and evaluating potential benefits and harms across areas such as fairness, privacy, safety, transparency, accountability and human rights
• Acting on the findings: linking results to risk treatment, mitigation measures and approval decisions
• Documenting and reporting: recording the assessment clearly and communicating outcomes to leadership and auditors
• Keeping it live: monitoring, review triggers and updating assessments over the system’s lifecycle
• Case study workshop: participants work in groups to complete an impact assessment for a realistic AI use case

Learning outcomes

By the end of the day, participants will be able to:

• Explain the purpose and structure of ISO/IEC 42005
• Plan and scope an AI system impact assessment
• Identify affected parties and evaluate potential impacts
• Document an assessment that supports decision-making and audit
• Establish a process for ongoing review

Participants receive course notes, an assessment template and a certificate of attendance.

Through worked examples and a case study, participants walk through each stage of an assessment and leave with the skills and templates to complete one in their own organisation.