# A.9.3 Objectives for responsible use of AI system

Identify and record the objectives that steer how AI systems are used responsibly. In practice the record is responsible use objectives (for example accessibility, privacy and security, robustness, safety, reliability, explainability, transparency, accountability, fairness). For objectives for responsible use of ai system the evidence is what people did, not what they were told.

- Framework: ISO/IEC 42001:2023
- Cited to: ISO/IEC 42001:2023, Annex A control A.9.3
- Source: https://www.iso.org/standard/81230.html
- Last updated: 2026-10-20

## What it asks

Identify and record the objectives that steer how AI systems are used responsibly.

## Where generative AI changes the answer

Objectives for use have to be measurable in the workflow, such as the share of outputs that needed correction before they were acted on.

## Who it binds

The business owner of the use and the people who act on the output.

## Evidence an auditor samples

- Responsible use objectives (for example accessibility, privacy and security, robustness, safety, reliability, explainability, transparency, accountability, fairness)
- Mechanisms to achieve them including meaningful human oversight points
- Training records for oversight personnel

## The test you can run

Ask for one logged exception to the acceptable-use rule, and for what was done about it.

## Common failures

- Human oversight objectives not tied to life cycle stages
- Oversight staff not trained on system documentation

## Before the draft publishes

Write the acceptable-use rule in the words staff use, publish it where they work, and record the first exception it produces.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.
