Certification · ISO/IEC 42001:2023
ISO 42001
The international standard for AI management. Proof that the AI you build, buy and deploy is governed responsibly.
Overview
What is ISO 42001?
ISO 42001 sets out the requirements for an AI Management System (AIMS): how you decide where AI is used, assess its risks and impacts, set guardrails and keep improving them. Published in December 2023, it was the first certifiable international standard for AI management, and it applies to organisations that develop, provide or use AI systems.
Who needs it
- AI companies whose enterprise customers ask how their models, agents and data are governed
- SaaS businesses adding AI features or agents to their product
- Organisations preparing for AI regulation such as the EU AI Act, or for AI questions in security reviews
What’s involved
The path to ISO 42001.
- 01
Define the AIMS scope
Which AI systems are in scope, and whether you develop, provide or use each one.
- 02
AI policy and roles
An AI policy, clear accountability and the decision structures for approving new AI use.
- 03
AI risk assessment
A documented method for identifying and treating risks across your AI systems, from data to deployment.
- 04
AI system impact assessment
How each AI system could affect individuals, groups and society, and what you do about it.
- 05
Controls and Statement of Applicability
Annex A controls selected and justified, covering data, lifecycle, third parties and responsible use.
- 06
Internal audit and certification
Internal audit and management review, then Stage 1 and Stage 2 audits with a certification body.
How we help
We carry the documentation. You bring the decisions.
One program, built around your business, mapped to every framework you need.
- AIMS scope and design, integrated with your ISO 27001 program where you have one
- AI policy, roles and approval process
- AI risk assessment and AI system impact assessments
- Statement of Applicability and Annex A controls
- Guardrails for AI agents: access, actions and human oversight
- Internal audit, management review and certification audit support
Ready to start on ISO 42001?
Tell us where you are and where you need to be. We will spend 30 minutes understanding your situation and give you an honest view of the fastest sensible path.