2.1 — What is ISO/IEC 42001?
ISO/IEC 42001:2023, published in December 2023, is the world's first international management system standard for Artificial Intelligence. It specifies requirements for establishing, implementing, maintaining, and continually improving an AI Management System (AIMS) within an organization.
An AIMS is a set of interrelated or interacting elements of an organization that establishes policies, objectives, and processes to achieve those objectives in relation to the responsible development, provision, or use of AI systems. It provides the organizational structure for governing AI throughout its lifecycle.
The standard follows the Harmonized Structure (HS) common to all ISO management system standards (like ISO 27001, ISO 9001), making it straightforward to integrate into existing management systems. It uses the Plan-Do-Check-Act (PDCA) cycle as the foundation for continual improvement.
ISO 42001 is certifiable — organizations can undergo third-party audits to achieve certification, demonstrating to stakeholders, regulators, and customers that they manage AI responsibly. Certification is conducted by accredited certification bodies and is valid for three years with annual surveillance audits.
The standard applies to any organization that provides or uses AI — regardless of size, type, or sector. It covers the entire AI lifecycle from conception through decommissioning.