For greater than three years, an IEEE Standards Association working group has been refining a draft normal for procuring artificial intelligence and automatic resolution methods, IEEE 3119-2025. It’s meant to assist procurement groups determine and handle risks in high-risk domains. Such methods are utilized by authorities entities concerned in training, well being, employment, and plenty of different public sector areas. Final 12 months the working group partnered with a European Union company to guage the draft normal’s parts and to assemble details about customers’ wants and their views on the usual’s worth.
On the time, the standard included 5processes to assist customers develop their solicitations and to determine, mitigate, and monitor harms generally related to high-risk AI methods.
These processes have been drawback definition, vendor analysis, answer analysis, contract negotiation, and contract monitoring.
The EU company’s suggestions led the working group to rethink the processes and the sequence of a number of actions. The ultimate draft now consists of an extra course of: solicitation preparation, which comes proper after the issue definition course of. The working group believes the added course of addresses the challenges organizations expertise with getting ready AI-specific solicitations, comparable to the necessity to add clear and strong information necessities and to include questions concerning the maturity of vendor AI governance.
The EU company additionally emphasised that it’s important to incorporate solicitation preparation, which supplies procurement groups further alternatives to adapt their solicitations with technical necessities and questions concerning accountable AI system selections. Leaving area for changes is very related when acquisitions of AI are occurring inside emerging and changing regulatory environments.
Gisele Waters
IEEE 3119’s place within the requirements ecosystem
Presently there are a number of internationally accepted requirements for AI management, AI ethics, and normal software acquisition. These from the IEEE Standards Association and the International Organization for Standardization goal AI design, use, and life-cycle administration.
Till now, there was no internationally accepted, consensus-based normal that focuses on the procurement of AI instruments and presents operationalsteerage for responsibly buying high-risk AI systems that serve the general public curiosity.
The IEEE 3119 standard addresses that hole. Not like the AI administration normal ISO 42001 and different certifications associated to generic AI oversight and threat governance, IEEE’s new normal presents a risk-based, operationalapproach to assist authorities businesses adapt traditional procurement practices.
Governments have an essential position to play within the accountable deployment of AI. Nonetheless, market dynamics and unequal AI experience between trade and authorities will be obstacles that discourage success.
One of many normal’s core targets is to raised inform procurement leaders about what they’re shopping for earlier than they make high-risk AI purchases. IEEE 3119 defines high-risk AI methods as those who make or are a considerable consider making consequential decisions that would have vital impactson folks, teams, or society. The definition is just like the one utilized in Colorado’s 2034 AI Act, the primary U.S. state-level legislation comprehensively addressing high-risk methods.
The usual’s processes, nonetheless, do complement ISO 42001 in some ways. The connection between each is illustrated under.
Worldwide requirements, usually characterised as soft law, are used to form AI growth and encourage international cooperation concerning its governance.
Arduous legal guidelines for AI, or legally binding guidelines and obligations, are a piece in progress around the globe. Within the United States, a patchwork of state legislation governs totally different points of AI, and the method to nationwide AI regulation is fragmented, with totally different federal businesses implementing their very own pointers.
Europe has led by passing the European Union’s AI Act, which started governing AI methods primarily based on their threat ranges when it went into impact final 12 months.
However the world lacks regulatory hard laws with a global scope.
The IEEE 3119-2025 normal does align with present laborious legal guidelines. As a consequence of its give attention to procurement, the usual helps the high-risk provisions outlined within the EU AI Act’s Chapter III and Colorado’s AI Act. The usual additionally conforms to the proposed Texas HB 1709 laws, which might mandate reporting on the usage of AI methods by sure enterprise entities and state businesses.
As a result of most AI systems used in the public sector are procured slightly than constructed in-house, IEEE 3119 applies to industrial AI services that don’t require substantial modifications or customizations.
The usual’s audience
The usual is meant for:
- Mid-level procurement professionals and interdisciplinary workforce members with a average degree of AI governance and AI system information.
- Public- and private-sector procurement professionals who function coordinators or patrons, or have equal roles, inside their entities.
- Non-procurement managers and supervisors who’re both accountable for procurement or oversee employees who present procurement capabilities.
- Professionals who’re employed by governing entities concerned with public training, utilities, transportation, and different publicly funded providers that both work on or handle procurement and are concerned about adapting buying processes for AI instruments.
- AI distributors searching for to know new transparency and disclosure necessities for his or her high-risk industrial merchandise and options.
Coaching program within the works
The IEEE Standards Association has partnered with the AI Procurement Lab to supply the IEEE Responsible AI Procurement Training program. The course covers apply the usual’s core processes and adapt present practices for the procurement of high-risk AI.
The usual consists of over 26 instruments and rubrics throughout the six processes, and the coaching program explains use many of those instruments. For instance, the coaching consists of directions on conduct a risk-appetite evaluation, apply the seller analysis scoring information to investigate AI vendor claims, and create an AI procurement “threat register” tied to recognized use-case dangers and their potential mitigations. The coaching session is now out there for buy.
It’s nonetheless early days for AI integration. Determination makers don’t but have a lot expertise in buying AI for high-risk domains and in mitigating these dangers. The IEEE 3119-2025 normal goals to help businesses construct and strengthen their AI threat mitigation muscular tissues.
From Your Web site Articles
Associated Articles Across the Net
