{"id":927,"date":"2026-07-27T18:29:58","date_gmt":"2026-07-27T18:29:58","guid":{"rendered":"https:\/\/i2sc.es\/?p=927"},"modified":"2026-07-28T08:08:24","modified_gmt":"2026-07-28T08:08:24","slug":"normas-cen-cenelec-para-el-gobierno-gestion-y-calidad-de-los-sistemas-de-ia","status":"publish","type":"post","link":"https:\/\/i2sc.es\/en\/blog\/normas-cen-cenelec-para-el-gobierno-gestion-y-calidad-de-los-sistemas-de-ia\/","title":{"rendered":"CEN\/CENELEC Standards for the Governance, Management and Quality of AI Systems"},"content":{"rendered":"

The European organisations CEN (European Committee for Standardisation<\/em>) and CENELEC (European Committee for Electrotechnical Standardisation<\/em>), as well as ETSI (European Telecommunications Standards Institute<\/em>), are developing harmonised standards that support the AI Act, and which include best practices that may be of interest to organisations wishing to govern, manage and ensure the quality of their Artificial Intelligence systems<\/a>.<\/p>\n\n\n\n

On CEN\/CENELEC<\/a>'s website, you can find all the standards defined by the Joint Technical Committee JTC21, which is responsible for standardising Artificial Intelligence. Some of these consist of the direct adoption of existing ISO\/IEC standards<\/a>, whilst in other cases new standards are being developed specifically designed to support the AI Act.<\/p>\n\n\n\n

As with ISO\/IEC, standards covering basic concepts can be found, such as EN ISO\/IEC 22989 Information technology \u2014 Artificial intelligence \u2014 Artificial intelligence concepts and terminology<\/a>, EN ISO\/IEC 23053 Framework for Artificial Intelligence (AI) Systems Using Machine Learning (ML)<\/a>, or the Draft European Standard (prEN) for characterising the methods and capabilities of artificial intelligence systems (prEN ISO\/IEC 42102 Information technology \u2013 Artificial intelligence \u2013 Framework for characterising AI system methods and capabilities<\/a>).<\/p>\n\n\n\n

1. Governance of AI Systems<\/strong><\/h3>\n\n\n\n

<\/p>\n\n\n\n

As regards governance-related aspects, CEN\/CELENEC have not adopted the ISO\/IEC 38507 standard, but they have adopted another standard relating to the risk associated with AI systems, such as EN ISO\/IEC 23894 Information technology \u2014 Artificial intelligence \u2014 Guidance on risk management<\/a>, which is supplemented by prEN 18228 AI Risk Management<\/a>, which sets out requirements and provides guidance for the risk management of AI systems. In addition, they are developing a checklist<\/em> (AI Risks \u2013 Checklist for AI Risk Management<\/a>) and a guide to risk management in critical digital infrastructure (Guidance on the Application of Risk Management in Critical Digital Infrastructure<\/a>).<\/p>\n\n\n\n

Another area that CEN\/CENELEC explores in depth is ethics, adopting standards such as EN 18274 Competence requirements for professional AI ethicists<\/a>, and developing others such as Guidance for upskilling organisations on AI ethics and social concerns<\/a> and the Guidelines on tools for handling ethical issues in the AI system life cycle<\/a>.<\/p>\n\n\n\n

As is to be expected with regulations relating to the AI Act, the legal aspects are set out in standards such as prCEN\/CLC\/TR 18347 Overview and architecture of standards in support of the EU AI Act<\/a> and a standard on impact assessment is even currently being developed (Impact assessment in the context of the EU Fundamental Rights<\/a>).<\/p>\n\n\n\n

2. Management of AI systems<\/strong><\/h3>\n\n\n\n

<\/p>\n\n\n\n

In addition to adopting some of the ISO\/IEC standards on AI Management Systems (AIMS), such as EN ISO\/IEC 42001 Information technology \u2014 Artificial intelligence \u2014 Management system<\/a> or the prEN ISO\/IEC 42006 Information technology \u2014 Artificial intelligence \u2014 Requirements for bodies providing audit and certification of artificial intelligence management systems<\/a>, CEN\/CENELEC have developed the standard EN 18286 Artificial intelligence \u2013 Quality management system for EU AI Act regulatory purposes<\/a>, with the aim of helping organisations to comply with the regulatory requirements applicable primarily to those that place high-risk AI systems on the market or put them into service. This EN 18286 standard and EN ISO\/IEC 42001 have overlaps and differences which we have already discussed in a previous article<\/a>.<\/p>\n\n\n\n

3. Quality of AI systems<\/strong><\/h3>\n\n\n\n

<\/p>\n\n\n\n

3.1. Data quality of AI systems<\/h4>\n\n\n\n

<\/p>\n\n\n\n

Starting with data quality, CEN\/CENELEC have adopted both the ISO\/IEC standard on the data life cycle (EN ISO\/IEC 8183 Information technology \u2014 Artificial intelligence \u2014 Data life cycle framework<\/a>), as well as the ISO\/IEC 5259 series of standards:<\/p>\n\n\n\n