ISO/IEC 42001

ISO/IEC 42001:2023

Artificial Intelligence Management Systems

A management-system standard for responsible development, provision and use of artificial-intelligence systems.

ISO/IEC 42001:2023 service visual

Who this standard can apply to

AI developers and product companies
Organizations deploying AI systems
Technology and data-service providers
Education, finance and healthcare organizations using AI
Public and private organizations managing AI risk

Typical areas reviewed

AI policy, objectives and governance
AI risk and impact assessment
Data, transparency and accountability controls
Lifecycle and supplier controls
Monitoring, review and continual improvement

Certification pathway

Application & Scope

Confirm the organization, sites, activities, requested standard and intended certification scope.

Document Review

Review relevant policies, procedures, records, objectives and management-system evidence.

Assessment / Audit

Evaluate implementation and objective evidence against the applicable requirements and approved arrangement.

Findings & Corrective Action

Where findings are identified, corrective action and supporting evidence are reviewed before closure.

Decision & Status

A defined decision is recorded with scope, validity and any applicable conditions or limitations.

Surveillance & Renewal

Ongoing status, surveillance and renewal requirements are managed according to the applicable certification arrangement.

Scope & Transparency

Certification, where offered, applies only to the defined management-system scope and responsible certification arrangement. It does not mean that ISO itself has certified or endorsed the organization.