ISO 42001 is an international standard that sets out requirements for an artificial intelligence management system within an organisation. It does not assess the quality of a specific model, but whether the company knows everywhere it uses AI, what risks arise from that, who is responsible for them, and how they are continuously monitored. Its structure follows on from other management system standards, so a company with information security or quality certification already has many elements in place – policy, risk management, internal audit, management review. In addition, it brings requirements specific to AI: assessment of impacts on affected persons, management of data and its quality, transparency towards users, and human oversight. It is particularly relevant for companies that supply AI or use it in decision-making with an impact on people, and for those whose customers are starting to require it.
Source: iso.org
See also: AI management system, Certification audit, Register of AI systems.
