# A.4.6 Human resources

As part of identifying resources, record the people and competences used for building, deploying, running, changing, maintaining, transferring and retiring the AI system and for integrating and verifying it. In practice the record is staffing and competence records per life cycle activity. For human resources the evidence is an inventory, not a statement.

- Framework: ISO/IEC 42001:2023
- Cited to: ISO/IEC 42001:2023, Annex A control A.4.6
- Source: https://www.iso.org/standard/81230.html
- Last updated: 2026-10-20

## What it asks

As part of identifying resources, record the people and competences used for building, deploying, running, changing, maintaining, transferring and retiring the AI system and for integrating and verifying it.

## Where generative AI changes the answer

Human resources means the people who read the output before it is used, and their competence is part of the control, not an implementation detail.

## Who it binds

The AI system owner and the functions that supply data, tooling, computing and people.

## Evidence an auditor samples

- Staffing and competence records per life cycle activity
- Evidence diverse expertise was considered (data science, human oversight, safety, security, privacy, domain experts)

## The test you can run

Ask for the data and tooling inventory for the use, and check that the evaluation set is in it.

## Common failures

- No competence recorded for decommissioning or transfer
- Human oversight roles not resourced

## Before the draft publishes

List the data, tooling, computing and people the use depends on, and mark which of them the organisation does not control.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.