This document provides terminology, concepts, requirements, and guidance for transparency of AI systems. It is primarily intended for organizations placing on the market or putting into service AI systems and is not specific to any particular sector

This document defines concepts, measures and requirements for assessment and treatment of bias in AI systems. This includes bias unwanted by the AI Provider and AI Deployer according to their specification of the AI system, in the context of the AI Act. This encompasses consideration of data bias including any data used to build or assess the AI system, but also system or model bias that can result from algorithmic factors, such as algorithm design choices.

This document specifies requirements and provides guidance for risk management of AI systems. It specifies terminology, principles and a process for risk management. The process described in this document intends to assist providers of AI systems to identify the hazards associated with the AI systems, to estimate and evaluate the associated risks, to control these risks, and to monitor the effectiveness of the controls. The process described in this document applies to risks to health, safety and fundamental rights associated with an AI system. The process described in this document is applied throughout the life cycle of the AI system. This document requires providers to establish objective criteria for risk acceptability but does not specify acceptable risk levels. This document is intended for use by organizations providing AI systems, regardless of their size, nature or location. This document is not intended for managing risk faced by organizations. This document is intended to support the organization in meeting applicable regulatory requirements.

This document aims to inform organizations for the application of the harmonised standards in support of the AI Act. This document provides information on the harmonised standards developed by CEN-CENELEC Joint Technical Committee 21, in response to the standardization request by the European Commission (C(2025) 3871). This includes the relationship of the harmonised standards to each other and the AI Act and provides an overview of key terms and definitions and related concepts. This document is informative and does not contain guidance or requirements. The document will not lead to presumption of conformity. This document will reference European Commission guidelines where appropriate. This document is aimed at all types of organisations providing high-risk AI systems and who are likely to use the harmonised standards when placing products or services on the EU market.

ISO/DIS 8102-20Electrical requirements for lifts, escalators and moving walks - Part 20: Cybersecurity

This document specifies cybersecurity requirements for new lifts, escalators and moving walks, referred to in this document as “equipment under control (EUC)”, designed in accordance with the ISO 8100 series. It is also applicable with other lift, escalator and moving walk standards that specify similar requirements, and to other lift-related equipment connected to the EUC.

This document specifies product and system requirements related to cybersecurity threats in the following lifecycle steps:

—    product development (process and product requirements);

—    manufacturing;

—    installation;

—    operation and maintenance;

—    decommissioning.

This document addresses the roles of product supplier and system integrator as shown in IEC 62443-4-1:2018, Figure 2, for the EUC.

This document does not address the role of asset owner as shown in IEC 62443-4-1:2018, Figure 2, but defines requirements for the product supplier and system integrator of the EUC to establish documentation allowing the asset owner, referred to as the “EUC owner” in this document, to achieve and maintain the security of the EUC.

This document specifies the minimum cybersecurity requirements for:

—    essential functions;

—    safety functions;

—    alarm functions.

This document is applicable to EUCs that are capable of connectivity to external systems such as building networks, cloud services, or service tools. The capability to connectivity can exist through equipment permanently available on site, or equipment temporarily brought to the location during the installation, operation and maintenance, or decommissioning steps.

EUC interfaces to external systems and services are in the scope of this document. External systems and services as such are out of the scope of this document.

This document does not apply to EUC that are installed before the date of its publication.

ISO/CD TS 8100-11 Lifts for the transport of persons and goodsPart 11: Interoperability between lift and other systems

Scope of the technical specification is to define ontology for the interoperability covering following use cases:  Remote monitoring of the lift system  Remote call registration  Building automation interfacing  Robot interfacing (AGV and MAR). The document also specifies safety related functions and aspect related to interoperability. In the document, oneM2M and OPC UA are used as examples how to apply the ontology.

This document covers means for software code and software configuration updates for lifts, escalators, and moving walks (EUC). Both on-site and remote updates are covered. This document does not apply to EUC that are installed before the date of its publication.

ISO 8100-2:2026Lifts for the transport of persons and goods

Part 2: Design rules, calculations, verifications and tests of lift components

This document specifies for passenger lifts and goods passenger lifts:

• the verification of door locking devices;
• the verification of safety gears;
• the verification of overspeed governors;
• the verification of buffers;
• the verification of safety circuits and SIL-rated circuits;
• the verification of ascending car overspeed protection means;
• the verification of unintended car movement protection means;
• the verification of rupture valves and one-way restrictors;
• the verification of suspension and compensation means;
• the discard criteria for suspension means and sheaves;
• the calculation of guide rails;
• the calculation of rams, cylinders, rigid pipes and fittings;
• the evaluation of the traction;
• the evaluation of the safety factor on suspension means;
• the pendulum shock tests;
• the fault exclusion for electric and electronic components;
• the design rules for SIL-rated circuits.

This document is not applicable to passenger lifts, goods passenger lifts or lift components, which are installed or manufactured before the date of its publication

ISO 8100-1:2026Lifts for the transport of persons and goods Part 1: Safety rules for the construction and installation of passenger and goods passenger lifts

This document specifies the safety rules for lifts permanently serving buildings and constructions and intended for the transport of persons or persons and goods. It applies to traction lifts, positive drive lifts and hydraulic lifts that:

• serve specific levels; and
• have a rated speed exceeding 0,15 m/s; and
• have an enclosed car; and
• move along guide rails inclined not more than 15° to the vertical; and
•     are indoor or weather-protected.

This document also applies to the electrical equipment of these lifts including the lighting and socket outlets in the well.

This document specifies safety rules related to:

• persons to be safeguarded:
• users, including passengers, maintenance and inspection personnel;
• persons at the landings and outside of the well, or any machinery space and pulley room, who can be affected by the lift.
• property to be safeguarded:
• loads in the car;
• components of the lift installation;
• building in which the lift is installed.

This document does not specify additional requirements for:

• lifts serving buildings with requirements for seismic conditions;
• lifts serving buildings with requirements for accessibility;
• lifts exposed to vandalism;
• lifts which can be used for firefighting and evacuation purposes under firefighters control;
• lifts which can be used to support faster evacuation of persons with disabilities;
• the behaviour of the lift when the control system of the lift receives a recall signal(s) in the event of fire in a building.

This document is not applicable to passenger and goods passenger lifts, which are installed before the date of its publication.

ISO/DIS 24946 Blockchain and distributed ledger technologies — Requirements and guidance for establishing, improving, preserving, and assessing the privacy capability of DLT systems: The document specifies DLT related requirements for establishing, improving, preserving, and assessing the privacy capability of DLT systems.

ISO/IEC 27033-1:2015 provides an overview of network security and related definitions. It defines and describes the concepts associated with, and provides management guidance on, network security. (Network security applies to the security of devices, security of management activities related to the devices, applications/services, and end-users, in addition to security of the information being transferred across the communication links.)

It is relevant to anyone involved in owning, operating or using a network. This includes senior managers and other non-technical managers or users, in addition to managers and administrators who have specific responsibilities for information security and/or network security, network operation, or who are responsible for an organization's overall security program and security policy development. It is also relevant to anyone involved in the planning, design and implementation of the architectural aspects of network security.

ISO/IEC 27033-1:2015 also includes the following:

- provides guidance on how to identify and analyse network security risks and the definition of network security requirements based on that analysis,

- provides an overview of the controls that support network technical security architectures and related technical controls, as well as those non-technical controls and technical controls that are applicable not just to networks,

- introduces how to achieve good quality network technical security architectures, and the risk, design and control aspects associated with typical network scenarios and network "technology" areas (which are dealt with in detail in subsequent parts of ISO/IEC 27033), and briefly addresses the issues associated with implementing and operating network security controls, and the on-going monitoring and reviewing of their implementation.

Overall, it provides an overview of this International Standard and a "road map" to all other parts.

ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:

a) the monitoring and measurement of information security performance;

b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;

c) the analysis and evaluation of the results of monitoring and measurement.

ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.