yucelyilmaz/Shutterstock.com
Artificial intelligence (AI) is transforming industries, but organisations must also manage risks related to privacy, security, transparency, bias and safety. ISO/IEC 42001 is the first international standard for artificial intelligence management systems, providing organisations with a structured framework for responsible AI governance.
In 2025, 20% of enterprises🡠in the European Union employed AI. Examining how AI risks affect users is essential to ensuring the responsible and sustainable deployment of these technologies.
ISO/IEC 42001: what is an AI management system standard?
ISO/IEC 42001 is the international standard for AI management systems. It provides requirements and guidance for organisations that develop, provide or use AI systems. The standard helps organisations manage risks related to AI.
ISO/IEC 42001 is an international standard that has been adopted as a European standard (EN ISO/IEC 42001) and published in Estonia as EVS-EN ISO/IEC 42001.
Why are AI management systems important?
AI management systems support compliance by helping organisations demonstrate responsible AI governance, align their AI practices with legal and regulatory requirements, manage risks like bias, safety, security and misuse. It also helps to strengthen trust among customers, partners and regulators.
This standard does not replace laws or regulations. Instead, it provides a structured framework that helps organisations to meet their compliance obligations.
Who should use ISO/IEC 42001?
ISO/IEC 42001 applies to organisations of all sizes and sectors that:
- develop AI systems,
- integrate AI into products or services,
- use AI for decision-making or automation,
- manage AI systems provided by third parties.
The structure of the AI management standard
ISO/IEC 42001 follows the footsteps of other management systems standards like ISO 9001 for quality, ISO 14001 for the environment, and ISO/IEC 27001 for IT security.
The standard covers understanding the organisation and its context, leadership commitments, and planning actions to address risks and opportunities. It also includes support through resources and competence, operational planning, AI risk assessment, performance evaluation through monitoring and audits, and continual improvement with corrective actions.
Annex A – Reference control objectives and controls,
Annex B – Implementation guidance for AI controls,
Annex C – Potential AI-related organisational objectives and risk sources,
Annex D – Use of the AI management system across domains or sectors and Integration with other management system standards.
Preview of EVS-EN ISO/IEC 42001
Access the preview of EVS-EN ISO/IEC 42001
The preview option helps you understand a standard’s scope, structure and key requirements before deciding if it meets your organisation’s needs.