# 5.7.1 Adapting

The framework is watched and adjusted as circumstances inside and outside the organization change (ISO 31000:2018, 5.7.1). For AI the changes to track include the organization's own systems learning or being retrained, new AI techniques and uses, fast-moving customer expectations and frequently revised AI law and guidance. Test it on the 5.7.1 question at the next framework review.

- Framework: ISO/IEC 23894:2023
- Cited to: ISO/IEC 23894:2023, clause 5.7.1
- Source: https://www.iso.org/standard/77304.html
- Last updated: 2026-10-20

## What it asks

The framework is watched and adjusted as circumstances inside and outside the organization change (ISO 31000:2018, 5.7.1). For AI the changes to track include the organization's own systems learning or being retrained, new AI techniques and uses, fast-moving customer expectations and frequently revised AI law and guidance.

## Where generative AI changes the answer

A vendor model update can change behaviour without a change to the organisation's own code, so adaptation cannot wait for the next annual review.

## Who it binds

Top management, the AI risk owner and the functions that supply resources and communication.

## Evidence an auditor samples

- Record of framework adaptations triggered by AI changes

## The test you can run

Ask for the risk register entry for the use. If there is none, the framework has not reached it.

## Common failures

- Framework unchanged while the AI estate and its regulation moved

## Before the draft publishes

Check that the use appears in the framework at all, with a named owner, a resource line and a route to raise a concern. Add the missing one.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.