What is ISO/IEC 42001?
Short answer
ISO/IEC 42001 is an international standard that specifies requirements for an AI management system: the policies, roles, risk assessments and controls an organization uses to develop or use AI responsibly. Organizations can be certified against it, much as with ISO/IEC 27001 for information security.
The details
Organizations that already run an ISO 27001 management system can reuse much of that structure, such as internal audit and management review, when adding AI governance.
Terms explained
- ISO/IEC 27001
- ISO/IEC 27001 is the international standard for an information security management system (ISMS), against which organizations can be independently certified.
- ISO/IEC 42001
- ISO/IEC 42001 is the international standard that specifies requirements for an artificial intelligence management system (AIMS).
Sources
Related questions
Related Guides
GuideGRC
10 Steps to Implement ISO 27001 and Get Certified
A step-by-step ISO/IEC 27001:2022 implementation plan: scope, leadership, risk assessment, Statement of Applicability, Annex A controls, internal audit, management review and the certification audit.
Read more GuideAI Security
9 Rules for Safe Use of Generative AI at Work
Discover nine practical rules for the safe use of generative AI at work. Protect company data, verify model outputs, and establish clear operational controls.
Read more GuideAI Security
10 LLM Security Risks Every Team Should Understand
Examine the top 10 LLM security risks affecting modern applications and learn concrete defensive controls to safeguard your data, models, and infrastructure.
Read more GuideAI Security
How to Deploy a Secure AI Chatbot for Small Business
Learn how to configure, test, and run a secure AI chatbot for your small business. Protect customer data, prevent prompt injection, and limit model access.
Read more