AI system operation and monitoring

Define and document what the AI system needs for ongoing operation, which at a minimum means monitoring of the system and its performance, repair, updating and support. The artefact behind the answer is operating procedures covering monitoring, repair, update and support. For ai system operation and monitoring the evidence sits at the gate it belongs to.

What it asks

Define and document what the AI system needs for ongoing operation, which at a minimum means monitoring of the system and its performance, repair, updating and support.

Where generative AI changes the answer

Operation and monitoring has to detect a vendor model change, a shift in the corpus and a rise in bad outputs, none of which alerts by default.

Who it binds

The AI system owner and the delivery team at each life cycle gate. For A.6.2.6 the named role is the owner of operating procedures covering monitoring, repair, update and support.

Evidence an auditor normally samples

• Operating procedures covering monitoring, repair, update and support
• Performance monitoring on production data including drift and continuous learning checks
• Update process with user communication
• Identification of AI-specific security threats in operation

The test you can run

Ask for operating procedures covering monitoring, repair, update and support and for its last review date; an artefact nobody can date is paperwork rather than a control.

Common failures

• Drift not monitored
• Updates pushed without informing users
• Use beyond the designed purpose not reviewed

Before the draft publishes

For A.6.2.6, walk the use through the life cycle gates and record which gate has no evidence behind it. That gap is what an auditor will ask about first. The first artefact to produce is operating procedures covering monitoring, repair, update and support.

Where this sits against the draft

The draft's published scope names controls for the risks it identifies, and A.6.2.6 (ai system operation and monitoring) is the published ISO/IEC 42001 control closest to that work. The draft does not replace it, and an audit still tests it against the evidence listed here.