Build trust with ISO 42001 in 2025

ISO 42001 is the first International Management System standard for the safe and reliable development and implementation of AI, and it enables certification of Artificial Intelligence Management Systems (AIMS). It is interoperable with the NIST AI Risk Management Framework and the EU AI Act.

It specifies requirements for establishing, implementing, maintaining and continually improving an Artificial Intelligence Management System (AIMS) within organisations. This standard is designed for entities providing or utilising AI-based products or services, ensuring responsible development and use of AI systems. It addresses the unique challenges AI poses, such as ethical considerations, transparency and continuous learning.

For organisations, it sets out a structured way to manage risks and opportunities associated with AI, balancing innovation with governance. It is a management system much in the same way as the Information Security Management System (ISO 27001). It provides a framework for policies, people and processes.

ISO 42001 applies to any organisation involved in the use, design, procurement, development or deployment of AI Systems. Feel free to reach out if you are unsure whether ISO 42001 applies to you!

• Artificial Intelligence: an engineered or machine-based system that can, for a given set of objectives, generate outputs such as predictions, recommendations, or decisions influencing real or virtual environments. AI systems are designed to operate with varying levels of autonomy. [ISO/IEC 22989:2022]
  
• AI model: a component of an information system that implements AI technology and uses computational, statistical, or machine-learning techniques to produce outputs from a given set of inputs. [United States Executive Order No.14110]
  
• AI System: any data system, software, hardware, application, tool, or utility that operates in whole or in part using AI. [United States Executive Order No.14110]