Information Technology

ISO/IEC 23894 — AI Risk Management

Identify and manage AI-specific risks.

Request Certification
AI Risk Management

About this standard

ISO/IEC 23894:2023 provides guidance on managing risks specific to artificial intelligence. Derived from ISO 31000 and adapted for AI, it addresses risks such as algorithmic bias, model hallucination, prompt injection, and model drift — enabling organizations to build trust and resilience in their AI systems.

Benefits of certification

  • Structured identification of AI-specific risks
  • Reduced risk of bias, hallucination, and model drift
  • Improved safety and reliability of AI systems
  • Confidence for regulators, partners, and end-users

Key requirements

  • AI risk assessment framework and risk register
  • Mitigation controls for bias, drift, and adversarial inputs
  • Continuous monitoring and evaluation of AI risks
  • Risk treatment, communication, and review procedures

Audit flow you'll go through

Every step is planned, executed, technically reviewed, and decided independently, in line with ISO/IEC 17021-1:2015.

  1. 1

    Application & Quotation

    Submit your application and scope; we review it and issue a certification quotation.

  2. 2

    Stage 1 Audit

    Document review and readiness assessment to confirm your management system is ready for Stage 2.

  3. 3

    Stage 2 Audit

    On-site audit evaluating implementation and effectiveness of your management system against the standard.

  4. 4

    Technical Review & Decision

    Findings are independently reviewed and a certification decision is made by a qualified committee.

  5. 5

    Certificate Issued

    Your certificate is issued and registered, valid for a 3-year cycle.

  6. 6

    Surveillance Audit 1 & 2

    Annual surveillance audits confirm continued conformity and improvement.

  7. 7

    Recertification

    A full audit before expiry renews your certificate for another 3-year cycle.

Get Certified

Ready to start your certification journey?

Apply online and our team will guide you through every step — from quotation to certificate issuance, fully aligned with ISO/IEC 17021-1.

Request ISO/IEC 23894 certification

Submit your details and our team will start your application per ISO/IEC 17021-1.

Accredited By

IACG (International Accreditation Consortium Group)

IACG is a global organization dedicated to upholding standards of excellence in accreditation and certification management. With a commitment to transparency, integrity, and exceptional customer service, we set the benchmark for the global certification industry.

IACG (International Accreditation Consortium Group)

The accreditation marks shown above signify that GlobalCert operates in accordance with internationally recognized standards. Accreditation does not constitute a guarantee of certification outcome.

Global Offices

United Kingdom (Head Office)

GlobalCert Limited

71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Phone: +44 20 3950 1234

Email: info.uk@globalcert.uk

Singapore (Asia Pacific Office)

GlobalCert (Asia Pacific) Pte. Ltd.

9 Temasek Boulevard, #04-03 Suntec Tower Two, Singapore 038989

Phone: +65 6908 2345

Email: info.sg@globalcert.uk

United Arab Emirates

GlobalCert Middle East FZCO

Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates

Phone: +971 4 567 8901

Email: info.uae@globalcert.uk

Indonesia

GlobalCert Indonesia

Griya Ridha, Jl. H. Baping No.17 Ruang 301 RT.10/RW.7, Kel. Susukan, Kec. Ciracas, Kota Jakarta Timur 13750

Phone: +62 811 8144099

Email: indonesia@globalcert.uk

© 2026 GlobalCert. All rights reserved.