# A.2 Accountability

AI-related objective: The organization can identify who is responsible for the AI system and its outcomes, demonstrates that it acts responsibly and can answer for decisions the system contributes to. Used when establishing risk criteria (6.3.4), identifying consequences (6.4.2.6) and evaluating risk (6.4.4). Read accountability against the objective the use threatens most.

- Framework: ISO/IEC 23894:2023
- Cited to: ISO/IEC 23894:2023, clause A.2
- Source: https://www.iso.org/standard/77304.html
- Last updated: 2026-10-20

## What it asks

AI-related objective: The organization can identify who is responsible for the AI system and its outcomes, demonstrates that it acts responsibly and can answer for decisions the system contributes to. Used when establishing risk criteria (6.3.4), identifying consequences (6.4.2.6) and evaluating risk (6.4.4).

## Where generative AI changes the answer

Accountability for generative AI has to survive the handover from the team that bought the tool to the team that now depends on its output.

## Who it binds

The AI risk owner, with the objective owner named in the risk treatment plan.

## Evidence an auditor samples

- Named accountability per AI system

## The test you can run

Ask which objective the use threatens most and what measure shows it. A blank answer is the finding.

## Common failures

- Decisions attributed to 'the algorithm' with no accountable person

## Before the draft publishes

Pick the two objectives the use most affects, write the test you would apply, and record the result before the draft is published.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.