Definition
Published in December 2023, ISO/IEC 42001 follows the structure of other ISO management system standards such as ISO 27001 for information security. It requires an AI policy, defined roles, risk and impact assessment, controls across the AI life cycle, and continual improvement.
Organisations can be certified against it by accredited bodies. Certification is increasingly asked for in procurement as evidence that an AI vendor or implementer manages AI risk systematically.