3.5 License Obligations
Explains the procedure for reviewing the licenses of an AI system’s code, weights, datasets, and model tree to determine obligations, restrictions, and rights.
AI Extension Process
The stage of building AI-specific license, transparency, and SBOM processes that extend beyond code to cover models, weights, and datasets.
Categories:
This is stage 2 of the implementation roadmap. It is the area where the AI SBOM guide extends most significantly beyond ISO/IEC 5230, covering licensing obligations (3.5), transparency obligations (3.6), and AI SBOM generation and management (3.9).
3.6 Transparency Obligations
Explains the procedure for reviewing transparency obligations imposed by regulation and applying risk mitigation measures to issues such as disclosure of training data.
3.9 AI SBOM
Explains the procedure and formats for generating and managing an AI SBOM, automation tools, and the verification areas that tools alone struggle to fill.