Artificial intelligence management
ISO/IEC 42001: artificial intelligence management
Govern your AI. Lead with confidence.
ISO/IEC 42001 is the first international management system standard for artificial intelligence. It gives you a structured way to govern how AI systems are built, bought and used: who is accountable, how risks and impacts on people are assessed, and which controls apply across the lifecycle. It helps you show customers, regulators and other stakeholders that transparency, accountability and responsible use are managed, not assumed.
What the standard asks for
- An AI policy and defined roles for AI decisions
- AI risk assessment and AI system impact assessment
- Lifecycle controls, including the data that AI systems learn from and act on
- Controls for AI you buy from, or build with, third parties
- Internal audit, management review and continual improvement
When it usually comes up
Putting AI into products or decisions that affect people, or customers asking how you govern it.
Good to know
- It shares its structure with ISO/IEC 27001, so an organisation that already runs an ISMS can reuse leadership, risk, audit and review processes.
- It is a management system standard. It is not a law and it is not a technical test of your models.
How we help with ISO/IEC 42001
- Gap analysis
- Know exactly where you stand before you commit.
- Documentation
- Policies and procedures built around how you actually work.
- Implementation support
- Hands-on guidance from roadmap to rollout.
- Risk assessment
- Identify and treat risks before they become findings.
- Internal audit
- Find the gaps before the external auditor does.
- Training
- Your team understands the system and keeps it alive.
- Certification support
- Preparation for the Stage 1 and Stage 2 audits run by your chosen certification body.
- Maintenance
- Support through surveillance audits and continual improvement.
We advise and prepare. Certification is issued by an accredited certification body that is independent of us.
Often built together with
The ISO management system standards share one structure, so what you build for ISO/IEC 42001 is reused when you add another.
Working towards ISO/IEC 42001?
A scoping call is a conversation about your organisation, the standards in play, and what a sensible first step looks like.