A financial institution has integrated AI systems into its operations and has adopted risk management...

ISO 31000:2018 – Risk Management – Guidelines provides high-level principles and a generic framework for identifying, assessing, and mitigating risks — including those emerging from AI systems.

While ISO/IEC 27005 focuses on information security risk (related to ISO/IEC 27001), ISO 31000 is broader and commonly adopted by organizations for all types of operational and strategic risk management — including ethical, legal, and technical AI risks.

ISO/IEC 42001 references ISO 31000 as the baseline standard for managing AI-related risks.

Option C (ISO/IEC 23895) is not an officially recognized ISO standard as of the current publication.