5.3 Roles, responsibilities and authorities

Clause 5.3 of ISO/IEC 42001:2023 specifies that an organization must define and document the roles, responsibilities and authorities needed to operate an AI management system, ensuring clear accountability and appropriate competence for each function. It requires assigning authority for decision-making, oversight and resource allocation to support effective AI governance.