← All laws
ISO/IEC 42001VoluntaryInternational standard
ISO/IEC 42001:2023 — Artificial intelligence management system
Last reviewed Sep 25, 2026.
In short
ISO/IEC 42001 is the first certifiable international standard for an AI management system (AIMS). Like ISO 27001 for security, it asks an organisation to set AI policy and objectives, assess AI risks and impacts, assign roles, control the AI lifecycle and suppliers, and improve continually, with an Annex A of controls. Certification involves a two-stage audit and annual surveillance. It does not make you legally compliant by itself, but it maps well onto EU AI Act quality-management and documentation duties and is increasingly requested in procurement.
Who it applies to
- Organisations that build or use AI systems in International standard.
- Any use case — it is not limited to specific applications.
- Size: everyone, including solo operators.
- Voluntary, certifiable standard. Useful when customers or tenders ask for evidence of AI governance, and as a scaffold for EU AI Act quality-management duties.
Key dates
- Dec 18, 2023✓First edition published (December 2023)
What you have to do
- Define an AI policy, scope and objectives approved by leadership.
- Run AI risk assessments and AI system impact assessments for each system in scope.
- Implement Annex A controls: data management, transparency, human oversight, incident handling, supplier management.
- Keep documented information and records for the AI lifecycle.
- Audit internally and review with management on a cycle.
Penalties
None; voluntary standard. Certification can be suspended or withdrawn by the certification body.
Related lessons
- Level 1What AI compliance is (and who the rules target)6 min
- Level 1The world map of AI rules: EU, US patchwork, Canada, standards8 min
- Level 2Build your AI inventory6 min
- Level 4Governance structure and roles6 min
- Level 4Security and robustness7 min
- Level 5Management systems in practice: ISO 42001, NIST AI RMF and continuous assurance8 min
Industries where it matters
Sources
- ISO/IEC 42001:2023 — ISO ↗
- ISO/IEC 42001:2023 – A new standard for AI governance — KPMG ↗
- ISO/IEC 42001: AI Management Systems — ANAB / ANSI blog ↗
Last reviewed Sep 25, 2026.