ISO/IEC 42001: AI Management System Standard

ISO/IEC 42001:2023 (Information technology — Artificial intelligence — Management system) is the first international, certifiable management system standard for artificial intelligence. Published in December 2023 by Joint Technical Committee ISO/IEC JTC 1, Subcommittee SC 42, it specifies the requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS) across organizations that develop, provide, or deploy AI systems.

What Is ISO/IEC 42001 and What Is the ISO 42001 Standard?

Unlike voluntary risk taxonomies or product-level technical benchmarks, the ISO/IEC 42001 standard is a Type A management system standard designed for third-party conformity assessment and audit. Built on the ISO Harmonized Structure (Clauses 4 through 10) and a Plan-Do-Check-Act (PDCA) lifecycle, ISO 42001 requires an organization to define its specific role in the AI value chain—such as AI developer, AI producer/provider, or AI user/deployer—and govern both organizational AI risks and societal/individual impacts throughout the AI system lifecycle.

In the international AI governance stack, ISO/IEC 42001 sits at the center of three companion JTC 1/SC 42 standards:

ISO/IEC 23894:2023 (AI Risk Management Guidance): Supplies the risk identification, analysis, evaluation, and treatment guidance referenced when implementing Clauses 6.1.2 and 8.2 of ISO/IEC 42001.
ISO/IEC 42005:2025 (AI System Impact Assessment): Provides the operational methodology for assessing the foreseeable positive and negative consequences of an AI system on individuals, groups, and society as required under Clause 6.1.4, Clause 8.4, and Annex A.5.
ISO/IEC 42006:2025 (Requirements for Bodies Providing Audit and Certification of AIMS): Establishes the accreditation and auditor-competence requirements (building on ISO/IEC 17021-1) for certification bodies issuing ISO/IEC 42001 certificates.

How ISO/IEC 42001 Works: Clauses 4 to 10 and Annex A (38 Controls)

An ISO/IEC 42001 AI management system integrates mandatory management clauses (Clauses 4–10) with normative control objectives and controls in Annex A and normative implementation guidance in Annex B (plus informative Annex C on AI objectives/risk sources and Annex D on sector-specific application).

Core Management System Clauses (Clauses 4–10)

Clause 4 (Context of the organization):Requires identifying internal and external issues, interested parties, the organization’s exact role(s) with respect to AI systems (Clause 4.1), and the boundaries of the AIMS scope (Clause 4.3).
Clause 5 (Leadership): Mandates top management accountability, an established organizational AI policy (Clause 5.2), and defined governance roles and authorities.
Clause 6 (Planning): Requires defining an AI risk assessment process (Clause 6.1.2), an AI risk treatment process comparing chosen controls against Annex A and producing a Statement of Applicability (SoA) (Clause 6.1.3), and an AI system impact assessment process (Clause 6.1.4) evaluating consequences for individuals, groups, and society.
Clause 7 (Support): Covers computing/data/human resources, personnel competence, awareness, internal/external communication, and control of documented information.
Clause 8 (Operation): Requires executing the planned controls, performing AI risk assessments and treatments at planned intervals or upon significant change (Clauses 8.2–8.3), and documenting AI system impact assessment results (Clause 8.4).
Clause 9 (Performance evaluation): Mandates monitoring and measurement, independent internal audits of the AIMS (Clause 9.2), and scheduled management reviews (Clause 9.3).
Clause 10 (Improvement): Governs continual improvement (Clause 10.1) and root-cause corrective action for nonconformities (Clause 10.2).

Annex A Reference Control Objectives and Controls (A.2 to A.10)

Under Clause 6.1.3, every organization seeking conformance must compare its risk treatment controls against the 38 reference controls across 9 control objectives in normative Annex A and justify any exclusions in its Statement of Applicability (SoA):

Annex A Control Objective	Control Count	Scope and Required Governance Artefacts (Annex A & Annex B)
A.2 Policies related to AI	3 controls (A.2.2–A.2.4)	Documented AI policy, alignment with other organizational policies (privacy, security, quality), and periodic review of the AI policy.
A.3 Internal organization	2 controls (A.3.2–A.3.3)	Defined AI roles and responsibilities across lifecycle stages, and a confidential whistleblower/concern-reporting process for AI issues.
A.4 Resources for AI systems	5 controls (A.4.2–A.4.6)	Documentation of data resources, tooling, system and computing resources, and human competence required for the AI system.
A.5 Assessing impacts of AI systems	4 controls (A.5.2–A.5.5)	Documented AI system impact assessment process, recording of results, assessment of impacts on individuals/groups, and societal impacts.
A.6 AI system life cycle	8 controls (A.6.1.2–A.6.2.8)	Responsible design/development objectives, requirements specification, design/architecture documentation, verification and validation, deployment plan, continuous operation monitoring, technical documentation, and event log recording.
A.7 Data for AI systems	5 controls (A.7.2–A.7.6)	Data management across acquisition, quality requirements, data provenance, and data preparation (labeling, cleaning, bias mitigation).
A.8 Information for interested parties	4 controls (A.8.2–A.8.5)	System documentation and capability/limitation disclosures for users, external reporting of adverse impacts, incident communication, and regulatory reporting.
A.9 Use of AI systems	3 controls (A.9.2–A.9.4)	Processes for responsible use, human oversight and operational objectives during use, and ensuring AI systems are used only within intended scope.
A.10 Third-party and customer relationships	3 controls (A.10.2–A.10.4)	Allocating responsibilities between organization, partners, suppliers, and customers; governing third-party AI suppliers/foundation models; and accounting for customer expectations.

What Is the Difference Between ISO 42001 and ISO 27001?

Because both standards share the ISO Harmonized Structure (Clauses 4–10) and require a Statement of Applicability (SoA), organizations frequently integrate an ISO/IEC 42001 AIMS with an existing ISO/IEC 27001:2022 Information Security Management System (ISMS). However, their risk domains and technical controls differ fundamentally:

Primary risk lens: ISO/IEC 27001 protects the organization’s information assets (confidentiality, integrity, and availability of data), whereas ISO/IEC 42001 governs both organizational AI risks and external impacts on individuals, groups, and society (Clause 6.1.4 and Annex A.5), including fairness, transparency, explainability, safety, and human oversight.
Lifecycle and data controls: ISO/IEC 27001 Annex A focuses on 93 information security controls (access control, cryptography, physical and network security). ISO/IEC 42001 Annex A introduces 38 AI-specific controls covering training and test data provenance (A.7.4), data preparation and bias mitigation (A.7.6), model verification and validation (A.6.2.4), continuous post-deployment monitoring for model drift (A.6.2.6), and transparency disclosures to affected parties (A.8).
Cross-walk to other AI frameworks: For organizations comparing ISO/IEC 42001 against U.S. and European frameworks, see NIST AI RMF vs. ISO/IEC 42001 and EU AI Act vs. NIST AI RMF vs. ISO/IEC 42001.

Where ISO/IEC 42001 Matters for Research Labs, Clinical Informatics, and Supply Decisions

Who Needs ISO 42001 Certification?

ISO/IEC 42001 is voluntary unless mandated by contract or procurement policy, and applies to any organization—regardless of size or sector—that develops, provides, or uses AI systems. In clinical informatics, medical software (SaMD), and research computing, ISO/IEC 42001 certification is primarily pursued by:

Clinical AI and health-tech vendors supplying ambient clinical documentation, diagnostic decision support, or automated prior-authorization models to hospitals whose vendor risk committees require audited AI governance alongside SOC 2 or ISO 27001.
Foundation model providers and cloud research platforms demonstrating auditable model lifecycle documentation (A.6) and data provenance (A.7) to enterprise and academic customers.
Organizations preparing for EU AI Act high-risk obligations, where an audited AIMS provides structural alignment with the Quality Management System (Article 17), Data Governance (Article 10), and Fundamental Rights Impact Assessment (Article 27) obligations.

How Much Does ISO 42001 Certification Cost?

ISO itself develops standards and does not perform audits or set a fixed certification fee. The cost of organizational ISO/IEC 42001 certification is determined by third-party certification bodies accredited under ISO/IEC 42006 and ISO/IEC 17021-1 and scales according to audit-day calculations based on: (1) the number of employees within the AIMS scope, (2) the number and complexity of AI systems developed or deployed, (3) whether the organization is an AI developer, provider, or deployer, and (4) whether the audit is integrated with an existing ISO/IEC 27001 surveillance or recertification cycle.

Common Misunderstandings

Confusing Organizational AIMS Certification with Product or Individual Certification: ISO/IEC 42001 certifies an organization’s management system within its stated scope statement—it does not certify a specific AI model as “safe” or “unbiased,” nor does ISO issue individual certifications (personnel credentials such as “ISO 42001 Lead Implementer” or “Lead Auditor” are training certificates issued by training providers, not ISO/IEC 42001 organizational certification).
Skipping the AI System Impact Assessment (Clause 6.1.4 / Annex A.5): Teams migrating from ISO 27001 often treat AI risk assessment solely as a security threat exercise and fail to document impact assessments on external individuals, vulnerable groups, and society as required by Clause 6.1.4 and Clause 8.4.

Frequently Asked Questions

What is ISO/IEC 42001?

ISO/IEC 42001:2023 is the international standard published by ISO and IEC that specifies requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS) within organizations that develop, provide, or use AI systems.

What is the ISO 42001 standard structured around?

The standard follows the ISO Harmonized Structure across Clauses 4 to 10 (Context, Leadership, Planning, Support, Operation, Performance Evaluation, and Improvement) paired with normative Annex A (38 reference controls across 9 control objectives, A.2–A.10) and normative Annex B (implementation guidance).

What is the difference between ISO 42001 and ISO 27001?

ISO/IEC 27001 governs an Information Security Management System (ISMS) focused on protecting confidentiality, integrity, and availability of information assets, whereas ISO/IEC 42001 governs an AI Management System (AIMS) focused on the AI system lifecycle, data provenance, model verification, human oversight, transparency, and impact assessments on individuals and society.

Who needs ISO 42001 certification?

Any organization that develops, provides, or deploys AI-based products or services—particularly enterprise SaaS, healthcare AI, and cloud providers subject to customer procurement audits or regulatory governance requirements—can use ISO/IEC 42001 certification to demonstrate third-party audited AI governance.

How much does ISO 42001 certification cost?

ISO does not set fixed fees; certification audit pricing is quoted by accredited third-party certification bodies based on Stage 1 and Stage 2 audit duration, which depends on the organization’s headcount in scope, its AI role (developer vs. deployer), the number of AI systems, and whether the audit is combined with ISO/IEC 27001.

Sources

International Organization for Standardization (ISO) / International Electrotechnical Commission (IEC) — ISO/IEC 42001:2023: Information technology — Artificial intelligence — Management system (ISO/IEC JTC 1/SC 42) (https://www.iso.org/standard/81230.html)
ISO/IEC JTC 1/SC 42 — ISO/IEC 23894:2023 (AI Risk Management), ISO/IEC 42005:2025 (AI System Impact Assessment), and ISO/IEC 42006:2025 (Requirements for Bodies Providing Audit and Certification of AI Management Systems) (https://www.iso.org/committee/6794475.html)