Back to Frameworks
Emerging

ISO 42001 (AI)

ISO/IEC 42001 (2023) is the first international standard specifying requirements for an AI Management System — a governance structure for how an organization develops, deploys, and monitors AI systems responsibly.

It follows the same management-system structure as ISO 27001 (policies, risk assessment, continual improvement) but applies it to AI-specific concerns: bias, transparency, robustness, and the broader lifecycle risk of automated decision-making. Organizations building or deploying AI products are increasingly using it to demonstrate responsible-AI governance to regulators and enterprise customers alike.

See how LumiGRC handles ISO 42001 (AI)

Get a Demo
2023

First AI mgmt. standard

0%
Typical certification profile
Audit Rigor46%
Time to Certify40%
Surveillance Burden41%
Issued & Enforced By

ISO/IEC

ISO/IEC 42001:2023

Key Points

  • First certifiable international standard for AI governance
  • Mirrors the ISO management-system structure (policy, risk, improvement)
  • Addresses bias, transparency, and AI lifecycle risk
  • Increasingly used to demonstrate responsible-AI practices