# ISO/IEC 42001: the php2shell risks it governs

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Each ISO/IEC 42001 clause or control the GRC desk cites, the php2shell risks mapped to it and who owns them.

[Frameworks](../index.html) / ISO/IEC 42001

# ISO/IEC 42001: the php2shell risks it governs

For the organisations that run AI to find flaws or to write and check news, as this site does: the AI risk assessment and its treatment.

**Full name** ISO/IEC 42001:2023 Artificial intelligence management system · **Publisher** ISO and IEC · **Version** 2023 · [the official text](https://www.iso.org/standard/42001)

## Clauses and controls

| Control | What it asks (paraphrased) | Risks mapped | Owned or regulated by |
|---|---|---|---|
| **6.1.2** | AI risk assessment | [R08 Frontier AI finds critical flaws faster than maintainers can fix them](../../../grc/risks/r08/index.html) **20** critical | [OpenAI (Patch the Planet)](../../../grc/stakeholders/openai/index.html) |
| **6.1.3** | AI risk treatment | [R10 This newsroom's own agents are steered, leak or mislead](../../../grc/risks/r10/index.html) **12** high | [The editor](../../../grc/stakeholders/newsroom-editor/index.html) |
| **8.4** | AI system impact assessment | *no risk mapped* |  |


---
site v0.8.1 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/grc/frameworks/iso42001/index.html