6 — Planning
32 controls in the Planning clause
6.0Planning
6.1Actions to Address Risks and Opportunities
6.1.1General Risk and Opportunity Assessment
6.1.2AI Risk Assessment
6.1.2(a)Risk Assessment - Criteria Definition
6.1.2(b)Risk Assessment - Consistent Results
6.1.2(c)Risk Assessment - Risk Identification
6.1.2(d)Risk Assessment - Risk Analysis
6.1.2(d)(1)Risk Analysis - Consequence Assessment
6.1.2(d)(2)Risk Analysis - Likelihood Assessment
6.1.2(d)(3)Risk Analysis - Risk Level Determination
6.1.2(e)Risk Assessment - Risk Evaluation
6.1.2(e)(1)Risk Evaluation - Criteria Comparison
6.1.2(e)(2)Risk Evaluation - Treatment Prioritization
6.1.3AI Risk Treatment
6.1.3(a)Risk Treatment - Option Selection
6.1.3(b)Risk Treatment - Control Determination
6.1.3(c)Risk Treatment - Annex A Comparison
6.1.3(d)Risk Treatment - Statement of Applicability
6.1.3(e)Risk Treatment - Plan Formulation
6.1.3(f)Risk Treatment - Risk Owner Approval
6.1.3(g)Risk Treatment - Residual Risk Acceptance
6.1.4AI System Impact Assessment
6.2AI Objectives and Planning to Achieve Them
6.2(a)Objectives - Policy Consistency
6.2(b)Objectives - Measurability
6.2(c)Objectives - Requirements Consideration
6.2(d)Objectives - Monitoring
6.2(e)Objectives - Communication
6.2(f)Objectives - Updates
6.2(g)Objectives - Documentation
6.3Planning of Changes