ISO 42001 - Artificial Intelligence Management System
What is ISO 42001?
ISO/IEC 42001 is the first international standard for an Artificial Intelligence Management System. It covers governance, risk management, transparency and human oversight across the full lifecycle of an AI system, from design and training data through to operation and decommissioning.
Who is ISO 42001 for?
It applies to software companies that embed artificial intelligence in their products, service providers that use algorithmic decision making, financial institutions, recruitment companies, healthcare units, public bodies, and any business falling within the scope of Regulation (EU) 2024/1689 on artificial intelligence.
Benefits of ISO 42001
- Structured preparation for the requirements of the AI Regulation
- A record and classification of the AI systems in use
- Management of bias, error and misuse risks
- Documented human oversight of critical decisions
- Transparency towards clients, employees and supervisory authorities
- A competitive advantage in tenders and partnerships
- Control over model and data suppliers
- Integrated management alongside ISO/IEC 27001 and ISO/IEC 27701
Certification Requirements
The ISO 42001 management system must meet the applicable legal requirements concerning the business, in particular Regulation (EU) 2024/1689 and data protection legislation, as well as the requirements of the standard. An inventory of AI systems, an impact assessment and documentation of the controls in place are required.