In plain English
Laws must be followed. Frameworks and standards are voluntary guides that customers may still require. The EU AI Act sorts uses by risk. NIST has four groups of work: govern, map, measure and manage. ISO 42001 is a certifiable management system. Keep an AI register and get current legal advice.
- EU AI Act
- A law that sorts AI uses by risk level.
- NIST AI RMF
- A voluntary framework: govern, map, measure, manage.
- ISO 42001
- A standard for an AI management system.
Picture it
Risk levels in the EU AI Act
Banned uses
Practices judged unacceptable
High risk
Hiring, credit, education, essential services
Limited risk
Duties to tell people they deal with AI