What should an auditor do to evaluate the auditee’s conformity to control A.

Control A.9 in ISO/IEC 42001:2023 addresses the use of AI systems. It requires organizations to ensure AI systems are used in accordance with defined objectives and aligned with ethical principles, intended use, and applicable controls. Auditors must evaluate whether processes exist for the responsible use of AI and confirm that implementation aligns with those objectives.

Option A is related more to third-party agreements (Control A.6), and Option C refers to traceability (Control A.7 or A.13).