SV-19 / SERVICES
ISO 42001: a management system for responsible AI
ISO/IEC 42001 is the first international management system standard for artificial intelligence. It helps organisations govern AI in a structured way: who is accountable, how risks and impacts are assessed, and how systems are monitored through their life.
ISO/IEC 42001 is the first international management system standard for artificial intelligence. It helps organisations govern AI in a structured way: who is accountable, how risks and impacts are assessed, and how systems are monitored through their life. If you build AI products or rely on AI in important decisions, it offers a credible framework that customers and regulators can recognise.
What’s included
- Inventory of AI systems you develop, deploy or buy, and a view of where they sit in your processes
- AI policy, roles, responsibilities and governance structure
- AI risk and impact assessment methods covering fairness, transparency, safety and privacy
- Controls for data quality, model lifecycle, human oversight, testing and monitoring
- Third-party and supplier management for models, APIs and data sources
- Internal audit and management review preparation, alongside alignment with existing ISO 27001 work
Best for
AI product companies, organisations adopting generative AI at scale, and teams answering AI governance questions from customers or regulators.
How we work
- Map AI use and context. 2) Gap review against the standard. 3) Build governance, risk processes and records. 4) Prepare for the certification audit.
What you receive
AI system register, gap report, AI policy set, impact assessment templates, evidence map and an audit-readiness plan.
The result
Documented, proportionate AI governance that builds trust with customers and supports regulatory readiness.
Frequently asked questions
Does ISO 42001 make us compliant with AI laws?
Not automatically. It supports good governance, but legal obligations such as the EU AI Act or data protection law need their own assessment.
Is it only for AI developers?
No. Organisations that use AI in meaningful ways can also benefit.