The most widely anticipated standard in decades, ISO/IEC 42001:2023 – Information Technology – Artificial Intelligence – Management Systems was published in December 2023. ISO/IEC 42001:2023 is an international standard that defines requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS) within organizations.
What Is an Artificial Intelligence Management System (AIMS)?
An AI management system, as defined in ISO/IEC 42001, is a set of interrelated, interacting elements of an organization intended to establish policies and objectives, as well as processes to achieve those objectives, in response to the responsible development, provision, or use of AI systems.
Who Uses ISO/IEC 42001?
ISO/IEC 42001 is a global standard that can be used by organizations of all sizes, various industries, and whether they develop, produce, or use AI products or services that involve AI systems. The standard is adaptable, scalable, flexible, and bridges the gap between rapidly evolving technological advancement and ethical oversight, thus promoting a culture of responsibility and trust in AI technologies.
What Is ISO/IEC 42001 Certification?
ISO/IEC 42001 does not certify products or services. Instead, ISO/IEC 42001 certification means that an independent third-party conformity assessment body (CAB) has verified that a company’s internal management system, including manufacturing or services processes used for the development, provision, or use of trustworthy and responsible AI, meet internationally recognized standards (e.g., ISO/IEC 42001) for quality, consistency, and effectiveness.
What Does ISO/IEC 42001 Cover?
Leading the way, ISO/IEC 42001 provides the framework and requirements for organizations to build a responsible, ethical, and trustworthy management system. The standard is structured around several components that are essential for the effective management of AI systems:
- AI Management Systems (AIMS) – Integration of AIMS with current organizational processes to assure alignment with any other ISO standards for which the organization is certified.
- AI Risk Assessment – A systematic approach to identify and mitigate risks throughout the AI lifecycle.
- AI Impact Assessment – Evaluation of the consequences of how AI systems affect people individually, in groups, and societies, considering environmental, cultural, safety, and ethical considerations.
- Data Management and Protection – Emphasis on accountable, transparent, and responsible handling of data and compliance with privacy laws.
- AI Security – Emphasis on safeguarding AI systems against threats.
- Control Objectives and Controls – Implement controls, including development and enforcement of AI-related policies.
AI is rapidly penetrating multiple industries, including healthcare, defense, transportation, finance, employment, energy, telecommunications, and marketing offering a multitude of benefits. Some examples of AI products and services include:
- Virtual assistants
- Healthcare diagnostics
- Autonomous vehicles
- Image recognition
- Natural language processing
- Smart home devices
- Gaming
- Fraud detection
ISO/IEC 42001 aligns with government initiatives like the U.S. Risk Management Framework and the EU AI ACT and reflects a growing global emphasis on responsible and trustworthy AI. The standard helps businesses balance innovation and governance while managing risks and opportunities. The relevance and potential influence of this standard on future regulations and compliance requirements is limitless. ISO/IEC 42001 is a roadmap for shaping a harmonized approach for responsible and trustworthy AI governance.
ANAB Accreditation for ISO/IEC 42001 AIMS Certification Bodies
ANAB launched the ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS) program in January 2024. The demand for this program has been enormous. To date, 15 applicant and ANAB-accredited certification bodies have applied for ISO/IEC 42001, and a few CBs are nearing the end of the ANAB ISO/IEC 42001 initial accreditation process.
All ANAB Management Systems (MS) accreditations are available via the MS ANAB directory. If ISO/IEC 42001 does not appear in the standard drop-down, no CBs are currently accredited for ISO/IEC 42001. Check back frequently to identify CBs that are accredited for ISO/IEC 42001.