The world's first international standard for AI management systems. ISO 42001 helps organisations demonstrate responsible, ethical, and trustworthy use of artificial intelligence.
What is ISO 42001?
ISO/IEC 42001:2023 is the first international standard specifically designed for AI management systems. Published in December 2023, it provides a framework for organisations that develop, provide, or use AI-based products and services to manage AI-related risks responsibly.
The standard follows the familiar ISO high-level structure (Annex SL), making it compatible with ISO 27001 and other management system standards. It addresses the unique challenges of AI including bias, transparency, explainability, and the societal impact of automated decision-making.
As AI regulation accelerates globally, including the EU AI Act, ISO 42001 certification provides a practical framework for demonstrating compliance and responsible AI governance.
Compliance requirements
ISO 42001 covers the full AI lifecycle, from design and development through to deployment, monitoring, and decommissioning.
Establish, implement, maintain, and continually improve an AI Management System covering the full AI lifecycle from design to decommissioning.
Identify and assess risks associated with AI systems, including bias, transparency, explainability, and unintended consequences for individuals and society.
Define and document AI objectives aligned with organisational values, ethical principles, and applicable legal and regulatory requirements.
Conduct impact assessments for AI systems to evaluate potential harms, fairness considerations, and societal effects before deployment.
Implement mechanisms for human oversight of AI decision-making, including override capabilities and escalation procedures for high-risk decisions.
Ensure AI systems can provide meaningful explanations of their outputs and decisions to affected individuals and relevant stakeholders.
Establish controls over training data quality, provenance, bias detection, and ongoing monitoring of AI model performance and drift.
Audit process
Netru manages the complete ISO 42001 certification journey, from cataloguing your AI systems through to certification body liaison.
We catalogue all AI systems in use and assess your current governance practices against ISO 42001 requirements.
Your compliance manager designs the AI Management System scope, policy framework, and risk methodology tailored to your AI use cases.
We conduct AI risk assessments and impact assessments for each AI system, documenting findings and treatment plans.
We implement governance controls, draft AI policies and procedures, and build your evidence library.
A formal internal audit verifies the AIMS is operating effectively before the external certification audit.
The certification body assesses your AIMS. Netru manages the entire process and auditor liaison.
You receive ISO 42001 certification, demonstrating responsible AI governance to customers, regulators, and partners.
How Netru delivers it
Our team combines deep AI governance knowledge with practical compliance delivery. We design your AIMS, conduct AI impact assessments, implement controls, and manage the certification process from start to finish.
Talk to our teamBefore you talk to anyone