# B.8 Technology readiness

AI-related risk source: Using AI technologies that are immature or unproven in the intended context brings uncertainty about their behaviour, limits and side effects. The artefact behind the answer is assessment of the maturity of the AI technologies used for the intended purpose. Use technology readiness as a prompt in the identification step, not as a finding.

- Framework: ISO/IEC 23894:2023
- Cited to: ISO/IEC 23894:2023, clause B.8
- Source: https://www.iso.org/standard/77304.html
- Last updated: 2026-10-20

## What it asks

AI-related risk source: Using AI technologies that are immature or unproven in the intended context brings uncertainty about their behaviour, limits and side effects.

## Where generative AI changes the answer

Technology readiness matters when a pilot is treated as a production control before anyone has measured how often it is wrong.

## Who it binds

The assessment team that runs identification, and the business owner who knows the use.

## Evidence an auditor samples

- Assessment of the maturity of the AI technologies used for the intended purpose

## The test you can run

Ask the assessment team to name the risk sources they considered. Compare the list with the ones present in the use.

## Common failures

- Novel technique deployed in production without evidence of readiness

## Before the draft publishes

Add the sources that apply to your use to the identification checklist, with a short note on why each one is or is not present.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.
