# A.2.3 Alignment with other organizational policies

Establish where other organizational policies may be affected by, or may apply to, the organization's objectives for AI systems. In practice the record is analysis of intersections with quality, security, safety and privacy policies. Read it against alignment with other organizational policies at the next policy review.

- Framework: ISO/IEC 42001:2023
- Cited to: ISO/IEC 42001:2023, Annex A control A.2.3
- Source: https://www.iso.org/standard/81230.html
- Last updated: 2026-10-20

## What it asks

Establish where other organizational policies may be affected by, or may apply to, the organization's objectives for AI systems.

## Where generative AI changes the answer

The conflict that matters is between the AI policy and the privacy, security and records policies, because a prompt can breach all three at once.

## Who it binds

The AI management system owner and the policy approver.

## Evidence an auditor samples

- Analysis of intersections with quality, security, safety and privacy policies
- Updates made to other policies or provisions added to the AI policy

## The test you can run

Ask five staff where the acceptable-use rule is and what it forbids. Compare the answers with the policy.

## Common failures

- AI policy conflicts with the privacy or security policy
- No analysis of intersecting policies

## Before the draft publishes

Compare the current AI policy with what staff actually do with generative tools, and record every gap you find as a policy exception until it is fixed.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.