ISO/IEC 42001 - AI management

You can purchase the ISO/IEC 42001 standard in our webshop. Please note: this is for personal use only. If you would like to make the standard available to your entire organisation, we recommend taking out a subscription to the NBN platform. This will allow you to use copyright-compliant standards throughout your organisation. View our solutions here.

ISO/IEC 42001 applies to organisations of all sizes that develop, implement or use AI-based products or services. Specific examples include governments and organisations in sectors such as healthcare, technology and finance.

ISO/IEC 42001 focuses specifically on AI systems, while ISO/IEC 27001 has a broader focus on information security. The two standards are complementary: by combining them, organisations can not only effectively address AI challenges but also implement strong information security processes.

The EU AI Act is the European legislation that imposes rules on the development, deployment and use of AI systems in the EU. ISO/IEC 42001, on the other hand, is a voluntary international standard that describes how organisations can set up an AI management system to manage AI responsibly and systematically. Although ISO/IEC 42001 does not guarantee compliance with the AI Act, it's a good first step for organisations that want to make their AI systems compliant with the AI Act in the future.