ISO/IEC 42001：AI-FW 控制与组织责任
了解框架义务、AI-FW 技术控制和组织责任。
ISO/IEC 42001：AI-FW 控制与组织责任 · 已生效
本页说明框架与 AI-FW 的关系。产品支持部分运行时控制，但不替代组织的合规或审计责任。
AI-FW 的定位
- 说明：AI-FW operates in the model and agent traffic path. It can record identity, inspect content, control model access and export decisions to support AIMS monitoring; it does not replace the management system.
产品不负责的事项
- 说明：Establishing AIMS context, leadership, objectives or processes.
- 说明：Identifying and assessing every organisational AI risk.
- 说明：Ensuring transparency, oversight or data quality across systems.
- 说明：Conducting certification audits.
- 说明：Covering systems outside the gateway.
控制映射
- 说明：AI system inventory: 说明：Understand AI systems and use contexts. AI-FW: 说明：Model Inventory and agent attribution for observed traffic.
- 说明：Risk assessment: 说明：Identify AI risks and impacts. AI-FW: 说明：Risk signals and auditable traffic decisions.
- 说明：Operational controls: 说明：Apply controls to AI operations. AI-FW: 说明：Guardrails, semantic inspection, routing and tool governance.
- 说明：Monitoring: 说明：Review outcomes and incidents. AI-FW: 说明：Dashboard, Audit Logs, exports and change events.
证据预期
- 说明：Models and endpoints: 说明：Observed inventory and approval.
- 说明：Traffic policies: 说明：Active rules and settings.
- 说明：Identity: 说明：Calls linked to authenticated users or agents.
组织责任
- 说明：Establish AIMS scope, leadership and improvement.
- 说明：Assess risks and impacts for each AI system.
- 说明：Define oversight, transparency and data-quality practices.
- 说明：Determine applicable controls and retain organisational evidence.
- 说明：Arrange independent audits where appropriate.
常见问题
说明：Does AI-FW make an organisation ISO/IEC 42001 compliant?
说明：No. It supports controls in observed traffic; conformity depends on the complete AIMS.
说明：Is Model Inventory a complete AIMS inventory?
说明：No. It covers models and endpoints registered or observed by AI-FW.
说明：Can evidence be exported for audit?
说明：Available records depend on configuration; validate coverage and retention.
一般信息，不构成法律或审计建议。