ISO/IEC 42001
Also known as: ISO 42001 · AI management system · AIMS
ISO/IEC 42001 is the international standard defining an artificial intelligence management system — how an organization governs its AI systems in a documented, auditable way.
It is built on the same skeleton as other management standards: policy, roles, risk analysis, objectives, controls, internal audit, management review, continual improvement. An organization already certified to ISO 27001 recognises the structure immediately.
It is not a technical standard about models: it says nothing about neural network architecture. It is about governance — who decides, on what basis, with what record.
It is certifiable by an accredited body, which sets it apart from a voluntary framework: it produces a document a buyer recognises.
What it means for a small business
Pursuing certification is a heavy project, but adopting the structure without certifying has real value: it is what lets you answer a vendor questionnaire without reinventing the answer each time.
Related terms
So what actually applies to you?
A definition tells you what a term means, not what your organization must do. The assessment answers the second question — free, no credit card.
Updated September 1, 2026 · Educational definition; not legal advice.