ISO/IEC 42001 · Process certification
ISO/IEC 42001. Management system for artificial intelligence
ISO/IEC 42001 is the first international standard for an artificial intelligence management system and defines requirements for the responsible use of AI systems.
Overview
What is it about?
ISO/IEC 42001 “Information technology. Artificial intelligence. Management system” is the first certifiable standard for an AI management system (Artificial Intelligence Management System, AIMS). It follows the common high-level structure of the ISO management system standards and can therefore be integrated into existing systems, for example those based on ISO/IEC 27001 or ISO 9001.
The standard addresses the specific opportunities and risks of using AI: transparency and explainability, fairness and the avoidance of unacceptable bias, data quality, robustness and human oversight of automated decisions. Through a risk-based approach and an AI-specific impact assessment, organisations should develop, deploy and operate AI systems responsibly across their entire lifecycle. The standard thereby also supports the governance requirements of the EU AI Act.
Purpose & benefit
Certification demonstrates that an organisation manages AI systems systematically, responsibly and traceably. It builds trust with customers, partners and supervisory bodies and supports preparation for regulatory requirements such as the EU AI Act.
What's included
- Context of the organisation, roles and governance for AI systems
- AI policy, objectives and responsibilities of top management
- Risk assessment and AI-specific impact assessment (AI System Impact Assessment)
- Controls from Annex A: data quality, transparency, human oversight and robustness
- Lifecycle of AI systems: development, deployment, operation and monitoring
- Operation, performance evaluation, internal audit and continual improvement
For whom
Is this right for you?
The standard is aimed at organisations of any size and sector that develop, deploy or use AI systems. It is especially relevant for providers and operators of AI applications in regulated or safety-relevant fields.
Your benefits
What it does for you
- First certifiable evidence of responsible AI management
- Structured preparation for regulatory requirements such as the EU AI Act
- Proof of trust towards customers, partners and supervisory bodies
- Integrable into existing management systems thanks to a common structure
Our role
How we work
- 1Planning and conducting certification audits to assess the conformity of your management system with the requirements of the standard
- 2Independent decision on certification based on the audit results
- 3Issuing and maintaining certificates
- 4Conducting surveillance and recertification audits in accordance with the applicable rules and defined time intervals
Impartiality
Consulting or support services for the introduction, implementation or improvement of management systems are not part of our activity as a certification body.
FAQ
Frequently asked questions
What distinguishes ISO/IEC 42001 from ISO/IEC 27001?
ISO/IEC 27001 governs the management of information security, whereas ISO/IEC 42001 governs the responsible use of AI systems. Including topics such as transparency, fairness and human oversight. Both standards share the same basic structure and can be combined.
Does certification replace conformity with the EU AI Act?
No. The EU AI Act is a legal regulation, while ISO/IEC 42001 is a voluntary management system standard. However, a certified AI management system supports structured preparation for the governance requirements of the AI Act.
For which organisations is the standard suitable?
The standard is suitable regardless of sector and size for all organisations that develop, provide or use AI systems. The scope of the management system is adapted to the context and risk profile of the respective organisation.
Your request
What would ISO/IEC 42001 cost for you?
Simply request a non-binding quote, quickly and directly.