ISO/IEC 42001 - Artificial Intelligence Management Systems

 

What is ISO/IEC 42001?

ISO/IEC 42001 is the world's first international standard for Artificial Intelligence Management Systems (AIMS). This comprehensive standard provides guidance for establishing, implementing, maintaining and continually improving an Artificial Intelligence Management System, helping organisations govern the responsible development, deployment and use of AI.

ISO/IEC 42001 enables organisations to identify and manage AI-related risks while promoting ethical, transparent and accountable AI practices. It encourages a structured approach to AI governance by considering people, processes and technology, whilst ensuring AI systems are developed and operated in line with recognised international best practice.

Once certified, organisations can proudly promote themselves as certificate holders in any of their promotional materials and can include the URS certification logo free of charge.

 

Who requires an ISO/IEC 42001 certification?

Any organisation that develops, provides, deploys or uses artificial intelligence systems can benefit from ISO/IEC 42001 certification. Relevant sectors include:  

 

• Technology and Software Development


• Finance


• Consulting


• Telecommunications

How can ISO/IEC 42001 benefit your business?

Becoming certified for ISO/IEC 42001 can bring a wide range of benefits to your organisation, including:

 

• Demonstrating responsible AI governance


• Building trust with customers and stakeholders


• Supporting regulatory compliance and emerging AI legislation


• Managing AI risks while encouraging innovation

How can you prepare for an ISO/IEC 42001 Certification?

Although the thought of starting the certification process may seem daunting, there are a variety of steps you can take to make the process to becoming certified far more streamlined:

 

• Familiarise yourself with the ISO/IEC 42001 standard


• Identify where AI is used throughout your organisation


• Assess AI-related risks, impacts and opportunities


• Ensure your AI governance policies and procedures are documented and understood


• Conduct internal audits to identify areas that do not comply with the standard


• Provide training to employees involved in the development, deployment and management of AI systems

What are the key requirements for ISO/IEC 42001?

When working towards ISO/IEC 42001 certification, there are several areas that will be a focus during the audit. These include:

 

• AI governance and accountability


• AI risk management


• AI Lifecycle


• Monitoring and continual improvement of AI systems

What clauses make up the structure of ISO/IEC 42001?

 

Clause 1-3 – Introductory Clauses:

The first three clauses in ISO/IEC 42001 introduce the standard and outline its scope, normative references, and terms and definitions. They also provide an overview of the standard's purpose and its compatibility with other ISO management system standards.

The seven remaining clauses cover the mandatory requirements for the Artificial Intelligence Management System (AIMS).

 

Clause 4 – Context of the organisation:

Clause 4 requires organisations to understand both internal and external issues that may affect their AI Management System. It also identifies the needs and expectations of interested parties and defines the scope of the AIMS.



Climate Change:

Clause 4.1 and 4.2 have added an assurance that climate change is considered for the management system. Due to the necessity of climate awareness, it should be considered by organisations and is therefore included as part of the standard.

Should a company minute their considerations during their Management Review regarding Climate Change Considerations (CCC) as well as evidence of their considerations and any actions, a discrepancy shall NOT be raised. However, should no minute exist for any considerations, then a discrepancy will be raised.

Where a minute and evidence does exist but is clearly of little relevance to CCC an Opportunity for Improvement (OFI) will be raised.

 

Clause 5 - Leadership:

This clause requires top management to demonstrate leadership and commitment to the AI Management System. It includes establishing an AI policy, assigning roles and responsibilities, and promoting responsible AI governance throughout the organisation.

 

Clause 6 - Planning:

Clause 6 focuses on identifying and addressing AI-related risks and opportunities. Organisations are required to establish AI objectives and plan actions to achieve them whilst considering legal, ethical and business requirements.

 

Clause 7 - Support:

Clause 7 outlines the resources needed to establish, implement and maintain the AI Management System. This includes competence, awareness, communication and documented information to support effective AI governance.

 

Clause 8 - Operation:

The operation clause covers the planning, implementation and control of AI-related processes. It requires organisations to manage AI system lifecycles, assess impacts, implement appropriate controls and ensure AI systems operate as intended.

 

Clause 9 – Performance evaluation:

Clause 9 requires organisations to monitor, measure, analyse and evaluate the effectiveness of their AI Management System. This includes conducting internal audits and management reviews to ensure continual suitability and effectiveness.

 

Clause 10 - Improvement:

The final clause focuses on continual improvement. Organisations are required to address nonconformities, implement corrective actions and continually improve the effectiveness of their AI Management System.

How long will your ISO/IEC 42001 certificate be valid for?

Your ISO/IEC 42001 certificate will typically be valid for three years, subject to successful annual surveillance audits and dependent on the type and scope of the organisation being certified.  

 

Ready to get started? Apply using the quotation link below.