Home / Answers / How do you prepare for ISO 25568 before publication?
How do you prepare for ISO/IEC DTS 25568 before publication?
Do five things now: inventory every generative AI use, put each one through the risk process you already run, complete the impact assessment for the highest exposure use, check that the Annex A controls it depends on are in your statement of applicability, and name the owners and the switch-off route. Keep the decision log, because it shows what you decided on an estimate and why.
Detail
The five steps
Do five things now: inventory every generative AI use, put each one through the risk process you already run, complete the impact assessment for the highest exposure use, check that the Annex A controls it depends on are in your statement of applicability, and name the owners and the switch-off route. Keep the decision log, because it shows what you decided on an estimate and why.
What to keep as evidence
The record separates what ISO has published from what it has not. The status, the stage history, the committee and the scope are public. The clause text is not. Every page on this site marks the difference, and the pages are written from the two published standards named in the record. None of them is a requirement of the draft.
What to leave until publication
What can be done before the text is published?
The inventory, the risk assessment, the impact assessment, the control check and the owners. All of it rests on published standards, not on the draft.
What should wait?
Any claim about what the draft requires. Until the clause text is public, that cannot be stated.
What evidence should be kept?
The decision log, the assessments, the impact assessment and the control evidence, each with its date and its basis.
Open the requirement record Run the free check
Related answers
Not legal advice; does not certify. Last updated: 2026-10-20.