What is ISO/IEC 42001?
ISO/IEC 42001:2023 is the first international standard specifying requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS). It is designed for any organization that provides or uses AI products or services, regardless of size or sector, and is auditable and certifiable by accredited bodies.
Requires AI risk assessments and AI system impact assessments over the full lifecycle.
Uses the ISO Annex SL high-level structure, so it integrates with ISO 27001 and 9001.
Addresses transparency, fairness, safety, security, and human oversight of AI.
Maps cleanly onto the EU AI Act and NIST AI RMF as an operational backbone.
Who it's for
- → AI providers & developers
- → Organizations deploying AI
- → Public-sector & regulated industries
- → Vendors managing AI supply chains
Stage 1 (readiness) → Stage 2 (audit) → surveillance audits → 3-year recertification.
Read the standard at the source (ISO)
Read the standard's scope, terms, clauses, and Annex A on the ISO OBP.
Abstract, status, edition details, and options to buy the official PDF or print.
Plain-language overview from ISO of what the standard is and why it matters.