ISO/IEC 42005:2025 AI system impact assessment

Why this page: the ISO/IEC 42001 certification path already covers what an AIMS certificate is and what accredited bodies publish about the audit. ISO also publishes a separate guidance document for impact assessments of individual AI systems. That document was not on the path. This page quotes public catalog text only. ISO sells the full text; this article does not reconstruct unpublished clauses.

Official ISO titles still say Artificial intelligence and AI. Super Intelligence (SI) is this site’s own-voice term for current U.S. executive-branch policy; it does not rewrite ISO titles.

What the catalog says ISO/IEC 42005 is

ISO lists ISO/IEC 42005:2025, Information technology — Artificial intelligence (AI) — AI system impact assessment as edition 1, 39 pages, from ISO/IEC JTC 1/SC 42. Status is Published. The catalog records publication date 2025-05 and, in the life-cycle table, International Standard published on 2025-05-28.

The public page says ISO/IEC 42005 provides guidance for organisations conducting AI system impact assessments. Those assessments focus on understanding how AI systems — and their foreseeable applications — may affect individuals, groups, or society at large. The standard supports transparency, accountability and trust in AI by helping organisations identify, evaluate and document potential impacts throughout the AI system lifecycle.

That is guidance for an impact assessment of an AI system. It is not, on that catalog page, a management-system certification scheme.

Who the catalog says should use it

ISO’s public FAQ on the same page: Any organisation developing, providing or using AI systems — regardless of sector or size — that wants to assess and manage the potential impacts of their AI systems on people and society.

On timing: The standard recommends performing assessments throughout the AI system lifecycle — from design and development to deployment and post-market monitoring — and updating them as needed.

How ISO relates 42005 to 42001 and 23894

The same catalog FAQ, How does ISO/IEC 42005 relate to other AI standards?, says it complements standards like ISO/IEC 42001 (AI management systems), ISO/IEC 38507 (AI governance), and ISO/IEC 23894 (AI risk management) by focusing specifically on the societal and human impacts of AI.

ISO/IEC 42001:2023 specifies requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS). ISO’s explainer says organizations may choose certification of that AIMS. UKAS granted BSI the first accreditation for certification of AIMS to ISO/IEC 42001:2023 on 15 January 2026. See the 42001 explainer and what auditors ask.

ISO/IEC 23894:2023 is guidance on how organizations that develop, produce, deploy or use products, systems and services that utilize artificial intelligence (AI) can manage risk specifically related to AI. See ISO/IEC 23894 and 5338 for engineering teams.

ISO’s Responsible AI governance and impact standards package restates the split: ISO/IEC 42001 sets the foundation by establishing an organization-wide management system; ISO/IEC 42005 offers a detailed methodology for conducting AI system impact assessments. It adds that ISO/IEC 42001 and ISO/IEC 42005 are designed to work hand in hand. That is ISO’s package page, not a clause-by-clause crosswalk this article invents.

This site has not found an official ISO page that says ISO/IEC 42005 is itself certifiable, so it does not claim that. Completing a 42005-style impact assessment is not, on any page we cite, an ISO/IEC 42001 certificate.

Questions

Is ISO/IEC 42005 a replacement for ISO/IEC 42001 certification?

No source we cite says that. 42001 is the AIMS requirements standard organizations may choose certification against. 42005 is catalogued as guidance for system-level impact assessments.

Does 42005 set aviation or CMMC requirements?

The catalog audience is any organisation developing, providing or using AI systems — regardless of sector or size. That page does not name FAA, EASA, DO-178C or CMMC. Those remain on their own explainers.