The organization must formally conduct AI system impact assessments according to the process established during its initial planning (as per ISO 42001 section 6.1.4).
These impact assessments, which evaluate the system's effect on individuals and society, must be performed at two key intervals:
- At planned, scheduled times (e.g., annually or on another regular cycle).
- Whenever significant changes occur or are proposed to the AI system, its intended use, or its operational environment.
Following every assessment, the organization must create and maintain documented information recording the findings, analysis, and conclusions of the impact assessment process.