Category: ISO 42001

ISO/IEC 42001 is the international management system standard for artificial intelligence: it specifies the requirements for establishing, implementing, maintaining and continually improving an AI management system (AIMS), and it is certifiable in the same way as ISO 27001. This section covers the standard from an implementer’s perspective — what auditors actually look for across Clauses 4 to 10, how the Annex A controls map to real governance activity, how to scope an AIMS proportionately for a mid-market organisation, and how to select tooling that produces audit-ready evidence rather than administrative overhead. It also addresses the relationship between ISO/IEC 42001 and the EU AI Act: the two are complementary but not interchangeable, and organisations facing both can design one operating model, one inventory and one evidence base that serves each framework without duplicated work. Written for compliance leads, DPOs and risk professionals preparing for certification or using the standard as a governance blueprint.