8.2 AI risk assessment

Entry 8.2 of ISO/IEC 42001:2023 defines the AI risk assessment process, requiring organizations to systematically identify potential hazards, evaluate their likelihood and impact, and determine risk levels for AI systems. It mandates documentation of assessment methods, criteria, and results, and integration of findings into the overall AI management system to support informed decision-making and continual improvement.