ISO 42001 AI Management System Certification

Flow chart of the ISO 42001 engagement, 6 phases in order, each one selectable. Phase 1, Scoping and AI Inventory. We map the AI systems in scope and confirm your roles as a developer, provider, or user of each one. Activities: Inventory AI systems, models, and use cases; Confirm your role for each system; Set the AI management system scope; Identify interested parties and their expectations. Hands over AI System Inventory and Scope Statement. Phase 2, AI Risk and Impact Assessment. We assess each system for risks to safety, fairness, and rights, using the impact assessment approach the standard expects. Activities: Run AI impact assessments per system; Assess bias, safety, and rights risks; Score risks against your acceptance criteria; Agree treatment for each material risk. Hands over AI Risk and Impact Assessment Reports. Phase 3, AI Control Design. We design controls for data quality, human oversight, transparency, and the full AI lifecycle. Activities: Select applicable Annex A controls of ISO 42001; Design data quality and provenance controls; Define human oversight and escalation points; Write the AI policy and lifecycle procedures. Hands over AI Control Set and Statement of Applicability. Phase 4, Implementation and Monitoring. We help you embed the controls and set up ongoing monitoring of model behaviour and performance. Activities: Embed controls into the model development lifecycle; Set up monitoring of model drift and performance; Configure incident and feedback channels; Train teams on the AI governance procedures. Hands over Operating AI Controls and Monitoring Dashboard. Phase 5, Internal Audit and Review. We audit the AI management system against the standard, then run a management review of the results. Activities: Audit the AI management system against ISO 42001; Sample impact assessments and oversight records; Log nonconformities and corrective actions; Run the management review with leadership. Hands over Internal Audit Report and Management Review Record. Phase 6, Certification Support. We support you through the certification audit and help you keep pace as regulation matures. Activities: Prepare the evidence pack for the certification body; Support Stage 1 and Stage 2 audit interviews; Close findings raised during the audit; Track EU AI Act developments against your controls. Hands over ISO 42001 Certificate. Each phase begins from the artefact the phase before it produced.