Annex A Controls and Annexes B, C, D: The Control Framework
The 38 controls in nine groupings that give ISO/IEC 42001 its teeth: what each control grouping demands, how Annex B guidance turns requirements into practice, how Annex C objectives and risk sources seed your risk assessment, and how to build a defensible Statement of Applicability.
Content current as of 2026-09.