{"id":4063,"date":"2026-05-15T09:12:18","date_gmt":"2026-05-15T09:12:18","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/05\/15\/ai-in-production-has-a-governance-problem-iso-iec-42001-is-starting-to-solve-it\/"},"modified":"2026-05-15T09:12:18","modified_gmt":"2026-05-15T09:12:18","slug":"ai-in-production-has-a-governance-problem-iso-iec-42001-is-starting-to-solve-it","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/05\/15\/ai-in-production-has-a-governance-problem-iso-iec-42001-is-starting-to-solve-it\/","title":{"rendered":"AI in Production\u00a0Has a Governance Problem\u00a0\u2014\u00a0ISO\/IEC 42001\u00a0is Starting to Solve It\u00a0"},"content":{"rendered":"<div><img data-opt-id=1125288229  fetchpriority=\"high\" decoding=\"async\" width=\"770\" height=\"330\" src=\"https:\/\/devops.com\/wp-content\/uploads\/2025\/05\/DevOps-and-AIOps-1.jpg\" class=\"attachment-large size-large wp-post-image\" alt=\"AI agents, SRE\" \/><\/div>\n<p><img data-opt-id=1715634789  fetchpriority=\"high\" decoding=\"async\" width=\"150\" height=\"150\" src=\"https:\/\/devops.com\/wp-content\/uploads\/2025\/05\/DevOps-and-AIOps-1-150x150.jpg\" class=\"attachment-thumbnail size-thumbnail wp-post-image\" alt=\"AI agents, SRE\" \/><\/p>\n<p><span data-contrast=\"auto\">DevOps teams have developed reliable software delivery through automated pipelines, repeatable deployments and standard observability. However, AI systems now operate in production environments\u00a0<\/span><span data-contrast=\"auto\">that\u00a0<\/span><span data-contrast=\"auto\">these practices do not fully govern, revealing growing gaps.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/kpmg.com\/ch\/en\/insights\/artificial-intelligence\/iso-iec-42001.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">ISO\/IEC 42001<\/span><\/a><span data-contrast=\"auto\">\u00a0is the first international standard for AI management systems. Practitioners should view it not as a compliance formality but as a framework addressing\u00a0<\/span><span data-contrast=\"auto\">the\u00a0<\/span><span data-contrast=\"auto\">challenges engineering teams face in production.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<h3><span data-contrast=\"auto\">The Problem\u00a0<\/span><span data-contrast=\"auto\">W<\/span><span data-contrast=\"auto\">ith AI in Production<\/span><span data-ccp-props='{\"134245418\":true,\"134245529\":true,\"335559738\":400,\"335559739\":120}'>\u00a0<\/span><\/h3>\n<p><span data-contrast=\"auto\">Traditional service failures are usually traceable, such as bad deployments, misconfigurations or resource constraints. Ownership is clear, rollback procedures are defined and postmortems follow a standard process.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><a href=\"https:\/\/devops.com\/when-systems-work-but-no-one-wakes-up-the-failure-between-monitoring-and-human-response\/\" target=\"_blank\" rel=\"noopener\">AI systems fail differently<\/a>. Models that performed well initially can degrade as real-world data drifts from training sets. Inference pipelines may produce unexpected outputs in untested edge cases. Unlike crashed services, degrading models often continue running, producing plausible but unreliable results.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">The deeper issue is organizational. While teams have strong software deployment practices, they often lack governance structures for AI systems\u00a0post-deployment. Key questions frequently remain unanswered:<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"2\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Who owns model effectiveness in production\u00a0\u2014<\/span><span data-contrast=\"auto\">\u00a0<\/span><span data-contrast=\"auto\">the data science team, the platform team or the product team?<\/span><span data-ccp-props='{\"335559738\":360}'>\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"2\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">What triggers a model retraining or rollback?<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"2\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">How is data quality monitored upstream of inference?<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"2\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">What constitutes an unacceptable output, and who decides?<\/span><span data-ccp-props='{\"335559739\":360}'>\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">These issues are not model p<\/span><span data-contrast=\"auto\">roblems<\/span><span data-contrast=\"auto\">\u00a0but process and ownership<\/span><span data-contrast=\"auto\">\u00a0<\/span><span data-contrast=\"auto\">challenges\u00a0<\/span><span data-contrast=\"auto\">that\u00a0<\/span><span data-contrast=\"auto\">governance is designed to resolve<\/span><span data-contrast=\"auto\">.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/www.iso.org\/standard\/42001\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">ISO\/IEC 42001<\/span><\/a><span data-contrast=\"auto\">\u00a0establishes an AI management system standard, a set of organizational requirements for governing AI responsibly across its full life<\/span><span data-contrast=\"auto\">\u00a0<\/span><span data-contrast=\"auto\">cycle. For practitioners, the relevant parts map onto familiar DevOps territory:<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"1\" data-aria-level=\"1\"><i><span data-contrast=\"auto\">Risk assessment before deployment<\/span><\/i><span data-contrast=\"auto\">\u00a0involves more than functional testing. It requires\u00a0<\/span><span data-contrast=\"auto\">a\u00a0<\/span><span data-contrast=\"auto\">methodical evaluation of potential model failures, data dependencies and\u00a0the downstream impact of degraded performance in production.<\/span><span data-ccp-props='{\"335559738\":360}'>\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"2\" data-aria-level=\"1\"><i><span data-contrast=\"auto\">Defined ownership at every stage<\/span><\/i><span data-contrast=\"auto\">\u00a0ensures explicit accountability for model development, deployment, monitoring and retirement, eliminating ambiguity about liability when issues arise.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"3\" data-aria-level=\"1\"><i><span data-contrast=\"auto\">Continuous post-release monitoring<\/span><\/i><span data-contrast=\"auto\">\u00a0covers not only uptime and latency but also\u00a0model behavior, output quality, prediction confidence distributions and data pipeline integrity over time.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props='{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\u25cf\",\"469777815\":\"multilevel\"}' data-aria-posinset=\"4\" data-aria-level=\"1\"><i><span data-contrast=\"auto\">Documented improvement<\/span><\/i><span data-contrast=\"auto\">\u00a0processes define response paths for model drift or underperformance\u00a0in advance, avoiding improvised reactions after incidents.<\/span><span data-ccp-props='{\"335559739\":360}'>\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">ISO\/IEC 42001 provides a governance layer above tooling, establishing organizational structures, policies and accountability models that ensure consistent, auditable practices across teams instead of relying on individual effort or institutional memory.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<h3><span data-contrast=\"auto\">Where This Lands for DevOps and Platform Teams<\/span><span data-ccp-props='{\"134245418\":true,\"134245529\":true,\"335559738\":400,\"335559739\":120}'>\u00a0<\/span><\/h3>\n<p><span data-contrast=\"auto\">AI governance must be integrated into delivery pipelines as a first-class concern, just as security and observability have been over the past decade.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Model versioning and deployment controls should mirror network update management:\u00a0<\/span><span data-contrast=\"auto\">R<\/span><span data-contrast=\"auto\">eviewed, tested and rolled back along defined paths. Monitoring must extend beyond service health to include model-specific signals\u00a0<\/span><span data-contrast=\"auto\">such as<\/span><span data-contrast=\"auto\">\u00a0prediction confidence, data schema drift and upstream pipeline anomalies. Incident response runbooks should address AI-specific failure modes as well as infrastructure issues.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Ownership must be explicit at the platform level. When a model produces harmful or anomalous outputs, responsibility cannot be dismissed as\u00a0<\/span><i><span data-contrast=\"auto\">the data science team built it<\/span><\/i><span data-contrast=\"auto\">. Platform teams operating AI infrastructure are accountable for the regulatory systems involved, and these structures must be defined before incidents reveal gaps.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<h3><span data-contrast=\"auto\">Why Getting This Right Matters<\/span><span data-contrast=\"auto\">\u00a0Now<\/span><span data-ccp-props='{\"134245418\":true,\"134245529\":true,\"335559738\":400,\"335559739\":120}'>\u00a0<\/span><\/h3>\n<p><span data-contrast=\"auto\">Although ISO\/IEC 42001 adoption is early, the shift it represents is underway. Organizations are transitioning from viewing AI as a feature to managing it as a production system requiring the same operational rigor as other services.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Practitioners have a limited window to establish governance proactively before incidents force action. Teams that define clear ownership, expand monitoring to model behavior and document response processes in advance will be better positioned as AI integrates deeper into critical workflows.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Moving fast without losing control is the core promise of DevOps. Extending this discipline to AI is the next logical step, supported by existing frameworks.<\/span><span data-ccp-props='{\"335559738\":120,\"335559739\":120}'>\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/devops.com\/ai-in-production-has-a-governance-problem-iso-iec-42001-is-starting-to-solve-it\/\" target=\"_blank\" class=\"feedzy-rss-link-icon\">Read More<\/a><\/p>\n<p>\u200b<\/p>","protected":false},"excerpt":{"rendered":"<p>DevOps teams have developed reliable software delivery through automated pipelines, repeatable deployments and standard observability. However, AI systems now operate [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":4064,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[5],"tags":[],"class_list":["post-4063","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops"],"_links":{"self":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/4063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/comments?post=4063"}],"version-history":[{"count":0,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/4063\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media\/4064"}],"wp:attachment":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media?parent=4063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/categories?post=4063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/tags?post=4063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}