ISO and IEC have published ISO/IEC 42001:2023, Information technology – Artificial intelligence – Management system, the world’s first international standard for an Artificial Intelligence Management System (AIMS).
Key features
- Uses the same harmonised structure as ISO/IEC 27001, so it integrates naturally with an existing ISMS.
- Requires AI risk assessment, risk treatment and AI system impact assessments on individuals, groups and society.
- Annex A sets out controls across the AI system lifecycle, including data governance, transparency, human oversight and third-party relationships.
- Applies to organisations that develop, provide or use AI systems, of any size and sector.
- It is certifiable, giving independent evidence of responsible AI governance.
As regulation such as the EU AI Act takes shape, ISO/IEC 42001 provides a practical, internationally recognised foundation for governing AI responsibly.
Source: ISO/IEC 42001:2023 (ISO)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
