ISO/IEC 42001 · Management systems
ISO/IEC 42001 Certification: Managing Artificial Intelligence Responsibly
The international standard for Artificial Intelligence Management Systems (AIMS). It enables organisations to systematically manage the development, provision and use of AI and to address associated risks and opportunities responsibly.
Overview
What is ISO/IEC 42001?
ISO/IEC 42001 is the international standard for Artificial Intelligence Management Systems (AIMS).
The standard specifies requirements for establishing, implementing, maintaining and continually improving an AI management system. It is intended for organisations that develop, provide, operate or use AI systems.
An AI management system provides a structured framework for systematically managing responsibilities, risks and opportunities related to artificial intelligence and for integrating responsible AI management into an organisation's governance and operational processes.
Certification Status
intellcert offers certification services in accordance with ISO/IEC 42001.
Are you interested in certifying your AI management system, or would you like to learn more about the requirements, the certification process, the expected duration, or the associated costs?
Please feel free to contact us. We will be happy to provide you with non-binding information on the next steps.
Purpose of ISO/IEC 42001 Certification
ISO/IEC 42001 certification provides independent confirmation that an AI management system meets the requirements of the standard.
Through assessment by an independent certification body, organisations can demonstrate to customers, business partners and other interested parties that they have established a systematic management approach for the responsible development, provision or use of artificial intelligence.
The focus includes AI governance, management of AI-related risks and opportunities, clearly defined responsibilities and effective management processes.
Who is ISO/IEC 42001 Certification for?
ISO/IEC 42001 is applicable across industries and to organisations of different sizes that develop, provide or use AI systems.
Certification may be particularly relevant for organisations that:
- develop their own AI systems or AI-enabled products,
- provide AI-based services,
- use AI systems within business or decision-making processes,
- obtain AI solutions from external providers and are responsible for their use within the organisation,
- wish to demonstrate systematic AI management to customers and business partners,
- wish to have their AI governance and risk management structures independently assessed.
The standard is not restricted to specific technologies or industries.
Key Areas of an AI Management System
ISO/IEC 42001 addresses artificial intelligence from an organisation-wide management perspective. Key areas include:
- AI governance and responsibilities,
- management of AI-related risks and opportunities,
- assessment of impacts associated with AI systems,
- roles, responsibilities and authorities,
- resources and competence,
- data and data management,
- documentation and traceability,
- management of the AI system life cycle,
- management of external providers and other relevant parties,
- monitoring, measurement and evaluation of the effectiveness of the AI management system,
- continual improvement.
The specific requirements applicable to an organisation depend on its context, activities and role in relation to AI systems.
ISO/IEC 42001 and ISO/IEC 27001
Organisations already operating an Information Security Management System according to ISO/IEC 27001 can use various existing management structures when establishing an AI management system.
Both standards follow a management system approach and address areas such as governance, risk, responsibilities, competence, documented information, monitoring and continual improvement.
Their primary focus, however, is different:
- ISO/IEC 27001 focuses on the management of information security.
- ISO/IEC 42001 focuses on the responsible management of artificial intelligence and the associated risks and opportunities.
The two management systems can therefore be integrated within a common management framework.
ISO/IEC 42001 and the EU AI Act
ISO/IEC 42001 and the EU AI Act address some related topics but are not equivalent.
ISO/IEC 42001 is a voluntarily applicable international management system standard. The EU AI Act is a European regulatory framework containing legally binding requirements for certain actors and AI systems.
An AI management system based on ISO/IEC 42001 can support organisations in establishing systematic governance, risk management and management structures for artificial intelligence.
However, ISO/IEC 42001 certification alone does not demonstrate conformity of an AI system with the EU AI Act and does not replace any legally required conformity assessment.
Our ISO/IEC 42001 Certification Services
Our ISO/IEC 42001 certification services include in particular:
- planning and conducting certification audits to assess conformity of the AI management system with ISO/IEC 42001,
- independent evaluation of audit results,
- certification decision,
- issuance of an ISO/IEC 42001 certificate following a positive certification decision,
- surveillance and recertification audits in accordance with applicable rules and defined intervals.
Our certification activities are clearly separated from consulting services.
Consulting, development or support activities relating to the establishment, design or optimisation of an AI management system or individual AI systems are not part of our activities as a certification body.
ISO/IEC 42001 Certification Process
The certification process begins with your enquiry and the provision of the information required for application review and quotation.
Based on this information, the intended certification scope and the relevant conditions for the certification process are determined.
The regular certification cycle comprises:
- Enquiry
- Application Review
- Quotation
- Stage 1 Audit
- Stage 2 Audit
- Independent Certification Decision
- Certificate
- Surveillance
- Recertification
The Stage 1 audit is used in particular to evaluate general readiness for certification and to prepare for the Stage 2 audit.
The Stage 2 audit assesses whether the AI management system has been effectively implemented and meets the applicable requirements of ISO/IEC 42001.
Accreditation Framework
In addition to ISO/IEC 42001, certification of AI management systems is based in particular on the requirements for management system certification bodies under ISO/IEC 17021-1 and the additional requirements of ISO/IEC 42006.
ISO/IEC 42006 specifies AI-specific requirements concerning the competence, consistency and reliability of bodies auditing and certifying AI management systems according to ISO/IEC 42001.
Our services
Our role in ISO/IEC 42001 certification
- 1Planning and conducting certification audits to assess the conformity of your management system with the requirements of the standard
- 2Independent decision on certification based on the audit results
- 3Issuing and maintaining certificates
- 4Conducting surveillance and recertification audits in accordance with the applicable rules and defined time intervals
Impartiality
Consulting or support services for the introduction, implementation or improvement of management systems are not part of our activity as a certification body.
Getting a quote
What does ISO/IEC 42001 certification cost for you?
The costs of certification depend on various factors such as company size, scope, processes, etc. This differentiated calculation results from the requirements of the relevant standards and regulations. For a binding quotation, we provide you with a service-request questionnaire. Upon receipt of the completed documentation, an individual quotation will be prepared based on the information provided.
More standards