ISO 42001
ISO/IEC 42001:2023 is the first certifiable management system standard for artificial intelligence: responsible use of AI, from risk assessment and data governance to human oversight.
About this standard
ISO 42001 in brief
ISO 42001 does for AI what ISO 27001 does for information security: it defines a management system (AIMS) that makes the use of AI controllable and demonstrable. The standard counts 62 controls in the library and is rapidly gaining ground as a preparation framework for the EU AI Act.
The library links ISO 42001 to the shared control set and to related frameworks such as the IIA AI Auditing Framework, so internal audit functions can build AI audits on an existing foundation.
In the library
Verified counts
62 controls
ISO/IEC 42001:2023 — AI Management System (AIMS) (version 2023).
41 frameworks
This standard does not stand alone: the library counts 1,807 controls and 2,224 cross-references.
Structure
Domains in ISO 42001:2023
- Governance (12)
- Risicomanagement (10)
- Ondersteuning (10)
- Levenscyclus en Operatie (10)
- Prestatie en Verbetering (5)
- Data (5)
- Transparantie (4)
- Verantwoord gebruik (3)
- Derden en klanten (3)
Related standards
ISO 27001 · NIS2 and the Dutch Cybersecurity Act · GDPR · DORA · BIO and BIO2 · NEN 7510 · Wpg (Dutch Police Data Act) · All standards
Get started with ISO 42001
Request a demo or see how CRAFT supports this standard.
Frequently asked questions
What is ISO 42001 and who is it relevant for?
ISO/IEC 42001:2023 is the first certifiable standard for an AI management system (AIMS). Relevant for any organisation developing or deploying AI that wants to do so in a controlled and demonstrably responsible way, especially with the EU AI Act approaching.
Does ISO 42001 help with the EU AI Act?
Yes, as a preparation framework. The AI Act sets legal requirements per risk class; ISO 42001 provides the management system to structurally assure those requirements. The library includes both, with cross-references between them.
How do I audit AI with this framework?
The library links ISO 42001 to the IIA AI Auditing Framework and to the shared control set. Internal audit functions build an AI audit on an existing foundation instead of starting from scratch.