ISO 42001
Vendor-neutral ISO/IEC 42001 guidance for AI management-system certification. Not legal advice.
What is ISO/IEC 42001 and what is an AIMS?
ISO/IEC 42001:2023 defines an AI management system (AIMS). Voluntary standard, not a product safety mark. Certification vs conformity explained. Not legal advice.
How do you get ISO 42001 certified?
Stage 1 and Stage 2 ISO 42001 certification path: gap assessment, AIMS build, accredited audit vs self-attestation vs readiness. Timelines vary. Not legal advice.
Who needs ISO 42001 and when is it worth pursuing?
ISO 42001 is voluntary, not a legal requirement. Decision tree for market, contractual, and EU AI Act adjacency drivers. Does not determine Act applies to YOU.
What should be on an ISO 42001 readiness checklist?
Printable ISO 42001 readiness checklist mapped to clauses 4–10 and Annex A themes. Required-by-standard vs recommended practice. Not legal advice. Not a certificate.
How does the ISO 42001 certification audit process work?
ISO 42001 Stage 1 and Stage 2 audits, nonconformities, CAPA, three-year cycle with annual surveillance. Accredited vs unaccredited certs. Auditor vs consultant independence.
What evidence does ISO 42001 require for an audit?
ISO 42001 evidence mapping: clause and Annex A control to artifact and owner. Mandatory documented information vs recommended records. Operation over time. Not legal advice.
What are the ISO 42001 Annex A controls?
ISO 42001 Annex A control themes explained with examples. Nine control areas: objective vs implementation approach. Faithful to ISO/IEC 42001:2023. Not legal advice.
How does ISO 42001 compare to ISO 27001?
ISO 42001 vs ISO 27001: scope, Annex A themes, certification, Annex SL overlap. Side-by-side comparison. One standard does not replace the other. Not legal advice.
How does ISO 42001 compare to the EU AI Act?
ISO 42001 voluntary AIMS standard vs EU AI Act Regulation (EU) 2024/1689 legal duties. Comparison table, Article 113 dates, harmonised standards status. Not legal advice.
Does ISO 42001 certification make you EU AI Act compliant?
No — ISO 42001 certification does not make you EU AI Act compliant. Qualified answer, obligation mapping aid, Article 113 dates. Strongest not-legal-advice framing.
How do you choose an ISO 42001 certification body?
Vendor-neutral guide to choosing an accredited ISO 42001 certification body. IAF and AB register checks, evaluation criteria, red flags. Not a ranking. Not legal advice.
What belongs on an AI governance audit checklist?
AI governance audit checklist cross-referencing ISO 42001 Annex A, NIST AI RMF 1.0, and EU AI Act themes with source labels. Printable. Not legal advice.
How does ShipReadyMetrics support ISO 42001 preparation?
How ShipReadyMetrics supports ISO 42001: evidence collection, met-verdict overlay, obligation map, crosswalk, AI inventory, AI risk register. Tooling, not certification.