ISO/IEC 42001

ISO/IEC 42001:2023 - Artificial Intelligence Management System

ISO/IEC 42001:2023 is the first international standard for Artificial Intelligence Management Systems (AIMS). It provides requirements for establishing, implementing, maintaining, and improving AIMS, focusing on the responsible use, governance, and risk management of AI across organizations.

Book your strategy call View source ↗

Overview

ISO/IEC 42001:2023 outlines a structured framework for organizations to manage the risks and opportunities related to AI systems. It is designed to ensure responsible AI development and use, addressing key challenges such as ethics, transparency, traceability, and compliance. The standard uses the Plan-Do-Check-Act methodology to guide organizations in implementing an Artificial Intelligence Management System tailored to various AI applications. It supports ethical AI practices, enhances trust, and ensures compliance with regulatory standards while encouraging innovation. ISO/IEC 42001 applies to any organization involved in developing, providing, or utilizing AI technologies.

Related in AI

AIFramework

AICM v1.1 — AI Controls Matrix v1.1

The AI Controls Matrix v1.1 (AICM) is a vendor-agnostic framework for securing cloud-based AI systems. It consists of 247 control objectives across 18 security domains, mapping to standards like ISO 27001 and ISO 42001.

Cloud Security Alliance (CSA) • Global • v1.1

View details

AIGuideline

AI-CAIQ — AI Consensus Assessments Initiative Questionnaire (AI-CAIQ)

The AI-CAIQ is a structured framework from the Cloud Security Alliance designed to help organizations self-assess compliance with AI-specific security, governance, privacy, and resilience controls. It builds on the widely adopted CAIQ for cloud security.

Cloud Security Alliance • Global • v1.1.0

View details

AIFramework

NIST AI RMF — NIST AI Risk Management Framework

The AI Risk Management Framework (AI RMF) is a voluntary framework developed by NIST to help organizations design, develop, use, and evaluate AI systems with trustworthiness considerations. It addresses governance, mapping, measuring, and managing AI risks.

National Institute of Standards and Technology (NIST) • United States • v1.0

View details

AIRegulation

EU AI Act — EU Artificial Intelligence Act

The EU AI Act (Regulation (EU) 2024/1689) is the world’s first comprehensive law regulating artificial intelligence. It establishes a risk-based framework that classifies AI systems into four categories—unacceptable, high-risk, limited-risk, and minimal-risk—with stricter obligations applied to higher-risk systems.

European Union • EU • vJanuary 2024

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call