Skip to content

Commit 854a833

Browse files
annex hard coded overall structure
1 parent 600db99 commit 854a833

File tree

2 files changed

+196
-2
lines changed

2 files changed

+196
-2
lines changed

Clients/src/presentation/pages/ISO/Annex/annex.structure.ts

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
// Start of Selection
12
export const ISO42001AnnexList = [
23
{
34
id: 1,
@@ -18,6 +19,7 @@ export const ISO42001AnnexList = [
1819
"Management direction and support for AI via policies.",
1920
guidance:
2021
"Management should define and endorse a set of policies to provide clear direction and support for AI development and use within the organization, aligned with business objectives and relevant regulations/ethics.",
22+
status: "Not Started",
2123
},
2224
{
2325
id: 2,
@@ -28,6 +30,7 @@ export const ISO42001AnnexList = [
2830
"Establishment of a governance structure for AI oversight.",
2931
guidance:
3032
"An AI governance framework, including roles, responsibilities, processes, and oversight mechanisms, should be established and maintained to direct and control the organization's AI-related activities.",
33+
status: "Draft",
3134
},
3235
{
3336
id: 3,
@@ -37,6 +40,7 @@ export const ISO42001AnnexList = [
3740
shortDescription: "Defining and allocating AI responsibilities.",
3841
guidance:
3942
"All AI system related responsibilities should be defined and allocated.",
43+
status: "In Progress",
4044
},
4145
{
4246
id: 4,
@@ -46,6 +50,7 @@ export const ISO42001AnnexList = [
4650
shortDescription: "Separating conflicting duties related to AI.",
4751
guidance:
4852
"Conflicting duties and areas of responsibility should be segregated.",
53+
status: "Awaiting Review",
4954
},
5055
{
5156
id: 5,
@@ -55,6 +60,7 @@ export const ISO42001AnnexList = [
5560
shortDescription: "Assigning accountability for AI systems.",
5661
guidance:
5762
"Accountability should be assigned for the establishment, implementation, maintenance, monitoring, evaluation and improvement of the AIMS and for AI systems throughout their lifecycle.",
63+
status: "Awaiting Approval",
5864
},
5965
{
6066
id: 6,
@@ -64,6 +70,7 @@ export const ISO42001AnnexList = [
6470
shortDescription: "Maintaining contact with relevant authorities.",
6571
guidance:
6672
"Appropriate contacts with relevant authorities should be maintained.",
73+
status: "Implemented",
6774
},
6875
{
6976
id: 7,
@@ -74,6 +81,7 @@ export const ISO42001AnnexList = [
7481
"Maintaining contact with special interest groups.",
7582
guidance:
7683
"Appropriate contacts with special interest groups and other specialist forums and professional associations should be maintained.",
84+
status: "Audited",
7785
},
7886
{
7987
id: 8,
@@ -83,6 +91,7 @@ export const ISO42001AnnexList = [
8391
shortDescription: "Integrating AI aspects into project management.",
8492
guidance:
8593
"AI should be integrated into the organization's project management.",
94+
status: "Needs Rework",
8695
},
8796
],
8897
},
@@ -99,6 +108,7 @@ export const ISO42001AnnexList = [
99108
shortDescription: "Defining and allocating AI responsibilities.",
100109
guidance:
101110
"All responsibilities related to the development, deployment, operation, and governance of AI systems should be clearly defined and allocated.",
111+
status: "Not Started",
102112
},
103113
{
104114
id: 10,
@@ -108,6 +118,7 @@ export const ISO42001AnnexList = [
108118
shortDescription: "Separating conflicting duties related to AI.",
109119
guidance:
110120
"Conflicting duties and areas of responsibility should be segregated to reduce opportunities for unauthorized or unintentional modification or misuse of AI systems or related assets.",
121+
status: "Draft",
111122
},
112123
],
113124
},
@@ -124,6 +135,7 @@ export const ISO42001AnnexList = [
124135
shortDescription: "Identifying resources needed for AI.",
125136
guidance:
126137
"Resources necessary for the development, operation, and maintenance of AI systems, including data, knowledge, processes, systems, computing power, and human expertise, should be identified and managed.",
138+
status: "In Progress",
127139
},
128140
{
129141
id: 12,
@@ -133,6 +145,7 @@ export const ISO42001AnnexList = [
133145
shortDescription: "Managing computational resources for AI.",
134146
guidance:
135147
"Computational resources required for AI systems should be managed throughout their lifecycle.",
148+
status: "Awaiting Review",
136149
},
137150
{
138151
id: 13,
@@ -142,6 +155,7 @@ export const ISO42001AnnexList = [
142155
shortDescription: "Managing data resources for AI.",
143156
guidance:
144157
"Data resources required for AI systems should be managed throughout their lifecycle.",
158+
status: "Awaiting Approval",
145159
},
146160
{
147161
id: 14,
@@ -151,6 +165,7 @@ export const ISO42001AnnexList = [
151165
shortDescription: "Managing system resources for AI.",
152166
guidance:
153167
"System resources required for AI systems, including tools and infrastructure, should be managed throughout their lifecycle.",
168+
status: "Implemented",
154169
},
155170
{
156171
id: 15,
@@ -160,6 +175,7 @@ export const ISO42001AnnexList = [
160175
shortDescription: "Managing human resources for AI.",
161176
guidance:
162177
"Human resources required for AI systems, including roles, competencies, and training, should be managed throughout their lifecycle.",
178+
status: "Audited",
163179
},
164180
],
165181
},
@@ -177,6 +193,7 @@ export const ISO42001AnnexList = [
177193
"Establishing and managing a defined AI lifecycle process.",
178194
guidance:
179195
"A defined lifecycle process should be established and managed for AI systems, covering stages from conception through retirement, incorporating AI-specific considerations.",
196+
status: "Needs Rework",
180197
},
181198
{
182199
id: 17,
@@ -187,6 +204,7 @@ export const ISO42001AnnexList = [
187204
"Analyzing and specifying AI system requirements.",
188205
guidance:
189206
"Requirements for AI systems, including functional, non-functional, data, ethical, legal, and societal aspects, should be analyzed and specified.",
207+
status: "Not Started",
190208
},
191209
{
192210
id: 18,
@@ -196,6 +214,7 @@ export const ISO42001AnnexList = [
196214
shortDescription: "Designing AI systems based on requirements.",
197215
guidance:
198216
"AI systems should be designed based on specified requirements, considering architecture, models, data handling, and interaction mechanisms.",
217+
status: "Draft",
199218
},
200219
{
201220
id: 19,
@@ -205,6 +224,7 @@ export const ISO42001AnnexList = [
205224
shortDescription: "Acquiring and preparing data for AI systems.",
206225
guidance:
207226
"Data for AI systems should be acquired, pre-processed, and prepared according to requirements and quality criteria.",
227+
status: "In Progress",
208228
},
209229
{
210230
id: 20,
@@ -214,6 +234,7 @@ export const ISO42001AnnexList = [
214234
shortDescription: "Building, training, and evaluating AI models.",
215235
guidance:
216236
"AI models should be built, trained, tuned, and evaluated using appropriate techniques and metrics.",
237+
status: "Awaiting Review",
217238
},
218239
{
219240
id: 21,
@@ -223,6 +244,7 @@ export const ISO42001AnnexList = [
223244
shortDescription: "Verifying and validating AI systems.",
224245
guidance:
225246
"AI systems should be verified and validated against requirements before deployment.",
247+
status: "Awaiting Approval",
226248
},
227249
{
228250
id: 22,
@@ -233,6 +255,7 @@ export const ISO42001AnnexList = [
233255
"Deploying AI systems into the operational environment.",
234256
guidance:
235257
"AI systems should be deployed into the operational environment according to planned procedures.",
258+
status: "Implemented",
236259
},
237260
{
238261
id: 23,
@@ -242,6 +265,7 @@ export const ISO42001AnnexList = [
242265
shortDescription: "Operating and monitoring AI systems.",
243266
guidance:
244267
"Deployed AI systems should be operated and monitored for performance, behaviour, and compliance with requirements.",
268+
status: "Audited",
245269
},
246270
{
247271
id: 24,
@@ -251,6 +275,7 @@ export const ISO42001AnnexList = [
251275
shortDescription: "Maintaining and retiring AI systems.",
252276
guidance:
253277
"AI systems should be maintained throughout their operational life and retired securely when no longer needed.",
278+
status: "Needs Rework",
254279
},
255280
],
256281
},
@@ -268,6 +293,7 @@ export const ISO42001AnnexList = [
268293
"Processes to ensure data quality characteristics.",
269294
guidance:
270295
"Processes should be implemented to ensure that data used for developing and operating AI systems meets defined quality criteria relevant to its intended use (e.g., accuracy, completeness, timeliness, relevance, representativeness).",
296+
status: "Not Started",
271297
},
272298
{
273299
id: 26,
@@ -277,6 +303,7 @@ export const ISO42001AnnexList = [
277303
shortDescription: "Managing the acquisition of data for AI.",
278304
guidance:
279305
"Data acquisition processes should ensure data is obtained legally, ethically, and according to specified requirements.",
306+
status: "Draft",
280307
},
281308
{
282309
id: 27,
@@ -286,6 +313,7 @@ export const ISO42001AnnexList = [
286313
shortDescription: "Preparing data for use in AI systems.",
287314
guidance:
288315
"Data should be prepared (cleaned, transformed, annotated) suitable for its intended use in AI system development and operation.",
316+
status: "In Progress",
289317
},
290318
{
291319
id: 28,
@@ -295,6 +323,7 @@ export const ISO42001AnnexList = [
295323
shortDescription: "Documenting the origin and history of data.",
296324
guidance:
297325
"Information about the origin, history, and processing steps applied to data (provenance) should be documented and maintained.",
326+
status: "Awaiting Review",
298327
},
299328
{
300329
id: 29,
@@ -304,6 +333,7 @@ export const ISO42001AnnexList = [
304333
shortDescription: "Protecting privacy in data used for AI.",
305334
guidance:
306335
"Privacy requirements should be addressed throughout the data lifecycle, including anonymization or pseudonymization where appropriate.",
336+
status: "Awaiting Approval",
307337
},
308338
{
309339
id: 30,
@@ -314,6 +344,7 @@ export const ISO42001AnnexList = [
314344
"Securely handling data throughout its lifecycle.",
315345
guidance:
316346
"Data should be handled securely, including storage, access control, transmission, and disposal, according to its classification and applicable requirements.",
347+
status: "Implemented",
317348
},
318349
],
319350
},
@@ -331,6 +362,7 @@ export const ISO42001AnnexList = [
331362
"Application of information security controls to AI systems.",
332363
guidance:
333364
"Information security requirements and controls (potentially leveraging standards like ISO/IEC 27001) should be applied throughout the AI system lifecycle to protect confidentiality, integrity, and availability.",
365+
status: "Audited",
334366
},
335367
{
336368
id: 32,
@@ -340,6 +372,7 @@ export const ISO42001AnnexList = [
340372
shortDescription: "Protecting AI models from threats.",
341373
guidance:
342374
"AI models should be protected against threats such as unauthorized access, modification, theft, or poisoning.",
375+
status: "Needs Rework",
343376
},
344377
{
345378
id: 33,
@@ -349,6 +382,7 @@ export const ISO42001AnnexList = [
349382
shortDescription: "Protecting data used by AI systems.",
350383
guidance:
351384
"Data used in AI systems should be protected according to information security policies and data classification.",
385+
status: "Not Started",
352386
},
353387
{
354388
id: 34,
@@ -359,6 +393,7 @@ export const ISO42001AnnexList = [
359393
"Ensuring AI systems are resilient to failures and attacks.",
360394
guidance:
361395
"AI systems should be designed and operated to be resilient against failures, errors, and attacks.",
396+
status: "Draft",
362397
},
363398
],
364399
},
@@ -376,6 +411,7 @@ export const ISO42001AnnexList = [
376411
"Managing risks when using third-party AI systems, components, or data.",
377412
guidance:
378413
"Risks associated with third-party provision or use of AI systems, components, services, or data should be identified, assessed, and managed through appropriate agreements and monitoring.",
414+
status: "In Progress",
379415
},
380416
{
381417
id: 36,
@@ -386,6 +422,7 @@ export const ISO42001AnnexList = [
386422
"Including AI-specific requirements in supplier agreements.",
387423
guidance:
388424
"Agreements with third parties supplying AI systems, components, services, or data should include relevant AI-specific requirements (e.g., security, privacy, ethics, performance).",
425+
status: "Awaiting Review",
389426
},
390427
{
391428
id: 37,
@@ -396,6 +433,7 @@ export const ISO42001AnnexList = [
396433
"Monitoring third-party compliance and performance.",
397434
guidance:
398435
"The performance and compliance of third parties involved in the AI system lifecycle should be monitored according to agreements.",
436+
status: "Awaiting Approval",
399437
},
400438
],
401439
},

0 commit comments

Comments
 (0)