What is ISO 42001?

ISO 42001 is an international standard that sets out the requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System. It provides organisations with guidance on how to manage AI technologies responsibly, addressing ethical concerns, transparency, and risk management.

Who is ISO 42001 for?

ISO 42001 is designed for any organisation, regardless of size or industry, that develops, provides, or uses AI-based products or services. This includes private companies, public sector agencies, and non-profit organisations, making the standard applicable across various industries that rely on AI technologies.

What is an Artificial Intelligence Management System?

An Artificial Intelligence Management System (AIMS) is a framework consisting of policies, processes, and objectives that enable organisations to manage the development, implementation, and use of AI technologies responsibly. ISO 42001 provides the requirements for establishing and maintaining this system, ensuring ethical, transparent, and accountable AI operations.

How long does it take to read all the ISO 42001 policies?

To read the entire ISO 42001 suite of policies including in the de.iterate platform it takes approximately 60 minutes. We spent months and months pouring over lengthy policies and removing all the waffly text that added no value. The result? You end up with just the good bits! You only need to read the lessons and learnings that matter, and that you need to remember.

What other training do my employees need after they read the ISO 42001 policies?

Your employees get to read our Smart Policies and get most of the training they need—all in one. Depending on your internal systems and processes, you will likely have some company-specific training that your employees will also need to complete.

I really want to read ISO 42001 policies as boring Word documents. Can you provide these for me?

We provide ISO 42001 Smart Policies in a digital format, with content that is simple, memorable and easy for you and your team to remember and implement. We don’t provide paper-based policies in Word (or even Excel) formats.

How long does it take to get certified to ISO 42001?

The time it takes to achieve ISO 42001 certification depends on the size and complexity of your organisation, as well as the current state of your AI management practices. For small businesses, it usually takes around 6 to 12 months, while larger or more complex organisations may take longer. With de.iterate, you can slash this time.

What are the benefits of getting certified to ISO 42001?

ISO 42001 certification helps organisations:

• Demonstrate responsible and ethical use of AI
• Enhance reputation and build trust with stakeholders
• Ensure compliance with AI regulations and governance standards
• Manage AI-related risks and opportunities in a structured manner

How often will be I audited for ISO 42001 certification?

For ISO 42001 certification, audits are typically conducted at regular intervals to ensure continued compliance with the standard. After your initial certification, the following audits will take place:

1. Surveillance Audits: These are usually conducted annually by the certification body to verify that your organisation is maintaining compliance with ISO 42001 and that your environmental management system remains effective.
2. Recertification Audits: Every three years, a more comprehensive recertification audit is required. This audit ensures that your organisation continues to meet all the requirements of ISO 42001.

The exact frequency of these audits may vary depending on the certification body and the specific agreement you have in place.

Does de.iterate perform the ISO 42001 audit?

If we could, we would. But—unfortunately—ISO Standards forbid us from doing this.

According to Clause 5.2.5 of ISO 17021-1:2015, which governs the requirements for bodies providing audit and certification of management systems, a certification body must remain impartial and cannot offer consultancy services to organisations they audit.

Instead, de.iterate provides a platform that helps businesses prepare for ISO 42001 certification by managing compliance requirements, such as policies, employee training, and process tracking. The actual audit for ISO 42001 certification is conducted by an accredited external certification body. de.iterate’s tools and features support your organisation in meeting the necessary standards to pass the audit successfully.

What are ISO 42001 audits like?

The thought of an ISO 42001 audit might be a bit nerve-racking. But it needn’t be—auditors are people too! Plus, you’ll have a secret weapon up your sleeve: de.iterate! With de.iterate on your team, you’ll have all the information and evidence you need to answer auditor questions easily and stress-free. Auditors love de.iterate. They know that a company that uses de.iterate properly has all their ducks in a row come audit day.

Can de.iterate be on-site during my ISO 42001 audit and answer questions from the auditor?

Yes, we can organise to attend your next ISO 42001 audit either virtually or in-person. Talk to one of the team today about your options at hello@deiterate.com.