ISO 42001

Understanding AI Management

The international standard for responsible AI systems

What Is ISO 42001?

The international standard for AI management systems

The requirements of ISO 42001 offer valuable guidance for anyone using AI-powered software in their organization. The standard provides a framework for making responsibilities, risks, and measures transparent.

The Four Main Building Blocks

1. The Playing Field

Define the scope, relevant factors, stakeholder requirements, objectives of the AI management system, and roles

2. AI Inventory

Get a clear picture: Where and how is AI being used? (Unfortunately, the standard refers only vaguely to "AI systems")

3. Risk Assessment

Review and assess 39 mandatory controls for every AI system

4. Improvement Process

Continuous review of the system's effectiveness and ongoing improvement

The Problem

Unfortunately, there is a problem: like many of its related standards, ISO 42001 is not particularly grounded in real-world practice.

One thing is important to understand: an audit examines the management system, i.e., the documentation of processes, risks, etc. It does NOT verify whether you have eliminated all risks, only how well you have documented them.

Our Approach

Practice before paperwork

Our approach is to build a system that works in practice and to derive the requirements for an audit (internal or external) from it.

Standard Approach

Documentation is produced to pass the audit. The actual benefit of ISO 42001 (risk awareness, transparency) is often lost along the way.

VS

The ISO-Proof Approach

We capture and assess software solutions from both a technical and a business perspective. The system should not only be audit-compliant but also genuinely useful in practice.

"We don't just want to help our clients obtain the certificate. We want our clients to be able to continue the process autonomously and on their own."

What Sets Us Apart

Neither auditor training nor the certification of organizations conveys any AI expertise. The standard merely refers to "AI systems" without defining what that means in technical terms.

Yet these "AI systems" are then assessed against 39 controls. To do that properly, you would need a better (technical) understanding of them.

AI Expertise

We understand what we audit - technically and from a business perspective

Inventory Expertise

Many years of experience in IT inventory and software asset management

Audit Edge

Our modern, AI-assisted solution for intuitive, automated audits

Lasting Value

Not just the certificate - but a practical working tool

Ready for ISO 42001?

Let's plan your path to certification together. We support you every step of the way, from the gap analysis to successful certification.