# A.4.5 System and computing resources

As part of identifying resources, record details of the computing and system resources the AI system relies on. In practice the record is computing resource records: requirements, location (on-premises, cloud, edge), processing, network and storage. For system and computing resources the evidence is an inventory, not a statement.

- Framework: ISO/IEC 42001:2023
- Cited to: ISO/IEC 42001:2023, Annex A control A.4.5
- Source: https://www.iso.org/standard/81230.html
- Last updated: 2026-10-20

## What it asks

As part of identifying resources, record details of the computing and system resources the AI system relies on.

## Where generative AI changes the answer

Computing resources decide whether outputs are complete and whether logs are kept long enough to reconstruct an incident.

## Who it binds

The AI system owner and the functions that supply data, tooling, computing and people.

## Evidence an auditor samples

- Computing resource records: requirements, location (on-premises, cloud, edge), processing, network and storage
- Assessment of hardware impacts including environmental and cost
- Resource needs per life cycle stage

## The test you can run

Ask for the data and tooling inventory for the use, and check that the evaluation set is in it.

## Common failures

- Environmental impact of compute never considered
- Development and production resource needs not distinguished

## Before the draft publishes

List the data, tooling, computing and people the use depends on, and mark which of them the organisation does not control.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.