Standard

ISO/IEC 42001 - AI Management System

Harness the full power of AI and reassure stakeholders of your responsible development and use of AI systems with ISO/IEC 42001.

Harness the full power of AI, and reassure stakeholders of your responsible development and use of AI systems, with ISO/IEC 42001.

Demonstrate to stakeholders that you’re developing or using AI systems responsibly with ISO/IEC 42001 - AI Management System. The international standard helps you to establish, implement, maintain and continually improve an AI management system within your organization.

BSI is the first Certification Body accredited by UKAS to certify ISO/IEC 42001, alongside our RvA accreditation in the Netherlands. This dual accreditation confirms to regulators, partners and consumers that BSI operates to the highest international standards of impartiality, competence and consistency in certifying AI management systems.

An ISO/IEC 42001 certified AI management system strengthens controls over quality, security, and transparency of your AI systems, while demonstrating trusted and responsible AI practices to stakeholders, regulators, and customers.

Products & Services

Develop and use AI responsibly as part of an AI assurance ecosystem

Understand, prepare for, and implement a trusted AI Management System with ISO/IEC 42001.

Get the Standard

Buy the ISO/IEC 42001 standard

Get the ISO/IEC 42001 - AI Management System standard or subscribe to get all the standards you need.

Visit the shop

Start Training

ISO/IEC 42001 training courses

Give your team the knowledge, skills, and confidence to implement ISO/IEC 42001 - AI Management System.

Find a course

Expertise

ISO/IEC 42001 Pre-Certification Assessment

A structured pre-assessment of your AI Management System ahead of a formal audit.

Get Certified

ISO/IEC 42001 certification

Get independent assessment and gain certification for your AI Management System.

Get started

Instil trust in AI and develop operational excellence with ISO/IEC 42001

Build AI competence and confidence – whether you are in government, academia, or business, regardless of your sector or size.

Accelerate AI development by creating a more stable and predictable AI environment.
Reduce the costs of AI development with a comprehensive framework, protocols and guidelines.
Maintain compliance and promote accountability by establishing clear lines of responsibility.
Meet customer, staff and stakeholder expectation through the ethical and responsible use of AI.
Improve efficiency, manage risk effectively, and enter new markets more easily.
A structured pre-certification assessment is available ahead of a formal audit.

FAQs

ISO/IEC 42001 frequently asked questions

An AI Management System is a structured framework that organizations use to oversee the development, deployment, and maintenance of artificial intelligence technologies. This system ensures that AI applications are designed, implemented, and operated in a manner that is ethical, transparent, and aligned with regulatory standards. It includes comprehensive policies and procedures for managing AI-related risks, promoting accountability, and ensuring the continuous improvement of AI systems. Key components of an AI Management System include governance structures, risk management strategies, compliance protocols, and training programs to build competence among personnel involved in AI projects.
The objectives of ISO/IEC 42001 compliance are to establish a comprehensive framework for managing artificial intelligence (AI) technologies within an organization. This includes ensuring that AI systems are developed and operated ethically, transparently, and in alignment with regulatory standards. By setting clear guidelines for AI governance, risk management, and accountability, ISO/IEC 42001 aims to identify and treat potential risks associated with AI, such as biases, security vulnerabilities, and data privacy issues. Compliance with the standard helps organizations build robust processes for the continuous monitoring and improvement of their AI systems, fostering trust and confidence among stakeholders.
The ISO/IEC 42001 standard provides a flexible framework that can be tailored to the specific needs and capabilities of organizations of all sizes, ensuring responsible and ethical AI management practices regardless of their scale. This allows both large corporations and startups to effectively manage AI risks, comply with regulations, and build trust with stakeholders.
Just like the EU AI Act, ISO/IEC 42001 covers all sectors and is of interest to governments, academia, and businesses involved in its development and deployment globally. This includes industry verticals likely to deploy AI such as IT and telecommunications, retail and e-commerce, healthcare, manufacturing, automotive, and many others.
ISO/IEC 42001 prepares organizations for future AI regulations by providing a comprehensive framework that emphasizes ethical and responsible AI use. By implementing ISO/IEC 42001, organizations establish policies and procedures that align with current regulatory requirements and anticipated future standards. This proactive approach ensures that organizations are well-prepared to adapt to new regulations as they emerge. The standard's emphasis on transparency, accountability, and risk management helps organizations create robust systems that can withstand regulatory scrutiny, thereby reducing the risk of non-compliance and associated penalties.
ISO/IEC 42001 relates to existing management systems by complementing and integrating with standards such as ISO 9001, ISO 27001, and ISO 13485.

ISO 9001 focuses on quality management, and ISO/IEC 42001 builds on this by providing a framework to manage the quality and consistency of AI systems.

Similarly, ISO 27001 addresses information security, and ISO/IEC 42001 extends these principles to the unique security risks and data protection challenges of AI.

ISO 13485 sets requirements for quality in medical devices, and ISO/IEC 42001 supports this by ensuring AI components meet high standards of safety and effectiveness.
BSI is an accredited Certification Body for ISO/IEC 42001. We have an extensive, highly skilled AI assessment team. We have considerable experience assessing AI systems as part of our Software as a Medical Device work as a Medical Device Notified Body, giving us deep domain experience of AI systems. We were involved with shaping the AI Management System standard ISO/IEC 42001, and we are currently performing audits for clients globally.