ISO42001
AI Risk Assessment vs. AI System Impact Assessment
ISO 42001 requires two separate assessments. What Clauses 6.1.4 and 8.4 require for the AI system impact assessment, how it differs from the risk assessment, and the EU AI Act link.
Create AIMS Policy for ISO42001 Compliance
What ISO/IEC 42001 clause 5.2 requires of an AI policy, the three Annex A.2 controls behind it, and how to build one with a working template.
Demystifying ISO42001
ISO/IEC 42001: the 10-clause structure, 38 Annex A controls across 9 themes, and how to build a Statement of Applicability that holds up in audit.
How to Conduct AI Risk Assessment
How to run an ISO 42001 AI risk assessment: Clause 6.1.2 vs 8.2, the ISO 31000 process, ISO 23894 risk sources, and a six-step method.
Organization’s Role Under ISO/IEC 42001
ISO 42001 does not define provider, operator, and user. ISO/IEC 22989 defines five roles instead: provider, producer, customer, partner, and subject. How role shapes your Annex A scope.
What is ISO42001 – The International Standard for AI Management Systems
ISO/IEC 42001:2023 explained: the 7 requirement clauses, 38 Annex A controls across 9 themes, and who needs an AIMS. The first certifiable AI management standard.