Skip to main content
—
Framework library
Framework module · iso-42005-2025

ISO/IEC 42005

International guidance for repeatable AI-system impact assessments across the system lifecycle. It complements ISO/IEC 42001, ISO/IEC 23894, and applicable AI laws; it is not an AI certification by itself.

2025 · ISO/IEC 42005:2025 · published 2025-05-28

Standing today
Directory entry

00Answer

from the registry record
What is ISO/IEC 42005?
International guidance for repeatable AI-system impact assessments across the system lifecycle. It complements ISO/IEC 42001, ISO/IEC 23894, and applicable AI laws; it is not an AI certification by itself.
Who does ISO/IEC 42005 apply to?
ISO/IEC 42005 applies to AI, technology, all sectors, global, per ISO/IEC 42005:2025.
What is the current version of ISO/IEC 42005?
The current edition is 2025, issued by ISO/IEC 42005:2025 and published 2025-05-28. Source: https://www.iso.org/standard/42005.
What does an assessment under ISO/IEC 42005 require?
No control catalog has been ingested for ISO/IEC 42005 yet — the registry tracks it as planned (Tracked metadata: we name the regime and monitor its issuing authority. No control or requirement model is implemented), so an assessment under this framework currently requires the authority's own catalog rather than a ControlFrame-parsed one.

01Standing

Directory entry

Authority and version facts, with a parsed public catalog when available; no tenant blueprint or executable evidence method is activated.

ISO/IEC 42005 is tracked in the registry — authority, version ledger, verification — and nothing else is modelled for it yet. Import its catalog to begin.

Licensed standard — purchase from ISO or a national member body and obtain software-use rights before verbatim ingestion.

Request this frameworkAuthority source (opens in a new tab)

02Registry record

checked 2026-08-28
Registry status
Planned · namedTracked metadata: we name the regime and monitor its issuing authority. No control or requirement model is implemented.
Control units
Not on record — no catalog ingested and no authority-published count cited.
Control families
Impact-assessment planning · Impact identification · Analysis and evaluation · Documentation and review
Applies to
AI · technology · all sectors · global
Verification
Primary — the issuing body's own page was read and states this version. checked 2026-08-28

03Version ledger

1 edition
2025Current edition2025-05-28

06Related frameworks

scored from registry facts
  1. ISO/IEC 238942023

    Also applies to AI · International guidance for integrating AI-specific risk management into organizations that develop, provide, deploy, or use AI systems. It complements ISO/IEC 42001 and is guidance, not a standalone certification.

  2. ISO/IEC 420012023

    Also applies to AI · The first certifiable management system standard for AI — the ISO 27001 shape applied to how an organization builds and operates AI systems.

  3. CSA STARSTAR Level 1 and Level 2

    Also applies to AI · The Cloud Security Alliance's cloud-assurance program and public registry. Level 1 is a CCM/CAIQ self-assessment; Level 2 is a third-party certification or attestation path. Tracking STAR does not place ControlFrame or any customer on the registry.

  4. AIUC-1Q3 2026 (2026-07-15 release)

    Also applies to AI · A quarterly updated standard and certification program for AI agents covering data and privacy, security, safety, reliability, accountability, and societal risk. Only AIUC can issue its certificate; registry inclusion makes no certification claim.

See control-level overlap in the Control Atlas
ISO/IEC 42005 | ControlFrame