This is the pre-eminent global certifiable standard for Artificial Intelligence Management Systems (AIMS). This standard framework provides detailed requirements for establishing, implementing, maintaining and continually improving an artificial intelligence management system (AIMS).
The objective of AIMS standard is to help organization in following the recommended policies and processes to practice AI responsibly. Companies and/or organizations that meet the standard's requirements can choose to be certified by an accredited registrar (or certification body) following successful completion of a Certification Audit.
ISO/IEC 42001: 2023 standard was built by International Organization of Standardization (ISO) and International Electrotechnical Commission (IEC) in 2023 and it was published in December 2023.
ISO/IEC 42001 Certification
Benefits of ISO/IEC 27001 Certification to your organization and your customers?
ISO/IEC 42001:2023 exists to help businesses and society at large, to safely and efficiently,
derive the maximum value from the use of AI. As such, the standard can help users to:
Improve the quality, security, traceability, transparency and reliability of AI applications as well as solve some implementation challenges;
Build greater confidence in AI systems;
Reduce the costs of AI development;
Maintain regulatory compliance;
Meet customer, staff and other stakeholder expectations around the ethical and responsible use of AI; and
Improve efficiency and risk management.
Certification of ISO/IEC 42001: 2013 (AIMS)
Artificial Intelligence Management Systems (AIMS) compliant with ISO 42001 can be certified by Accredited Registrars (aka Certifying Bodies) worldwide..
The ISO/IEC 42001 certification constitutes three-stage external audit process that is laid out by the requirements of ISO 17021 and ISO 27006
Stage 1: Is an informal review process of the AIMS, wherein the Auditor reviews important documents such as Information Security Policy, Statement of Applicability (SoA) and Risk Treatment Plan (RTP) and other mandatory documents. This stage is used by the auditor and the organization to get to know about each other.
Stage: This is the formal audit process wherein the auditor tests the various elements of the AIMS against the various provisions of ISO/IEC 42001 standard. Testing is based on evidence collected such as documents, interviews, questionnaire, technical review and/or mathematical artefacts. Auditors test implementation maturity and operational efficacy of the AIMS. Passing stage 2 leads to an organization being recommended for ISO/IEC 42001 Certification by the Registrar/Certification Body. Certification Audits are conducted by ISO/IEC 42001 Lead Auditors.
Qualitative Risk Analysis: By use of Delphi Techniques, Surveys, Focus Groups, Questionnaires, Interviews etc.
Ongoing: Certification maintenance requires that the organization conducts periodic re-assessment audits, at least once every year, to confirm that the AIMS continues to operate in compliance with the provisions of the ISO/IEC 42001 Standard.