Governance & Regulation advanced

ISO/IEC 42001

The international standard for an AI management system — certifiable, unlike the NIST framework.

ISO/IEC 42001 specifies requirements for establishing and improving an AI management system, in the same family as ISO 27001 for security. Being certifiable is the point: it gives procurement teams something to ask for. It complements rather than replaces the EU AI Act, which certification alone does not satisfy.

In practice: An enterprise RFP asking whether your AI management system is certified.