ISO 42001 is the first certifiable security framework for the use of artificial intelligence (AI). For organizations that are early adopters of AI, ISO 42001 certification is a powerful way to demonstrate they are committed to using the technology ethically and safely through implementation of an AI Management System (AIMS)

CompliancePoint works closely with our customers throughout the entire ISO 42001 certification process, making it easier for them to achieve their certification goals. Our services can be customized to focus on your organization’s pain points and high-priority tasks. CompliancePoint’s ISO team is comprised of former ISO auditors and senior practitioners who truly understand the challenges our customers face with these initiatives. Partnering with CompliancePoint to secure your ISO 42001 certification will provide you with:

  • Non-biased 3rd party support across the entire life cycle
  • The expertise, processes, procedures, and technology roadmap required for certification
  • Step-by-step support based on years of certification experience, customized to your organizational maturity
  • Practical and pragmatic advisory services for navigating the challenges of certification

CompliancePoint has a partnership with Mastermind, the world's first certification body for ISO 42001. We work with Mastermind to streamline the entire certification process for our customers, from initial readiness assessments and policy development to the resulting certification audit.

Full Life Cycle Management

Speak with an Expert

Our Focus

Our ISO services are designed to get organizations certified against the ISO 42001 standard. CompliancePoint will work with you to achieve and maintain compliance through the design and implementation of controls that address the key ISO 42001 principles.

Transparency

Decisions made or influenced by an AI system must be fully transparent and without negative societal or environmental implications.

Accountability

With the goal of building user trust, organizations must be ready to share the logic behind behind their AI-related decisions.

Explainability

Explanations of important factors influencing the AI system results should be provided to customers and stakeholders in a manner that is easy to understand.

Fairness

AI systems need to be assessed to ensure that its decision-making is not unfair or damaging to specific groups or people.

Data Privacy

A comprehensive data management and security program is necessary for protecting user privacy in an AI environment.

Reliability

AI systems must be safe and reliable for internal and external use.

Our Benefits

Objective & knowledgeable assessments
Proven techniques and strategies
Cost savings
No personnel certification costs
Target high-priority tasks

Access to cutting-edge tools & technology
No turnover
Security awareness training
Institutionalize your security processes
Control design & automation

Objective & knowledgeable assessments
Proven techniques and strategies
Cost savings
No personnel certification costs
Target high-priority tasks
Access to cutting-edge tools & technology
No turnover
Security awareness training
Institutionalize your security processes
Control design & automation

Let us help you develop your ISO 42001 certification roadmap today.

Learn More About ISO 42001

ISO 42001 was published in 2023 by the International Organization for Standardization (ISO).

The ISO/IEC 42001 can only be granted after an accredited third-party certification body performs an audit to determine if an organization’s AIMS meets the standard’s requirements. Certification is valid for three years. Annual supervision audits are required.

ISO 42001 Clauses 4-10 are mandatory and detail what is required of an AIMS to achieve certification.

4. Context of the organization

4.1 Understanding the organization and its context
4.2 Understanding the needs and expectations of interested parties
4.3 Determining the scope of the AI management system
4.4 AI management system

5. Leadership

5.1 Leadership and commitment
5.2 AI policy
5.3 Roles, responsibilities, and authorities

6. Planning

6.1 Actions to address risks and opportunities
6.2 AI objectives and planning to achieve them
6.3 Planning of changes

7. Support

7.1 Resources
7.2 Competence
7.3 Awareness
7.4 Communication
7.5 Documented information

8. Operation

8.1 Operational planning and control
8.2 AI risk assessment
8.3 AI risk treatment
8.4 AI system impact assessment

9. Performance evaluation

9.1 Monitoring, measurement, analysis, and evaluation
9.2 Internal audit
9.3 Management review

10. Improvement

10.1 Continual improvement
10.2 Nonconformity and corrective action

ISO/IEC 42001 contains four annexes that provide detailed guidance on how organizations can comply with the standard.

Annex A: Provides a comprehensive list of the standard’s controls and their objectives.
Annex B: Provides guidance for the implementation of the controls and data management processes.
Annex C: Addresses AI objectives and risk sources.
Annex D: Addresses the use of AI systems across different domains and sectors.

Records Icon

10 Billion+

Records Audited

Expert Witness

150+

Cases as an
Expert Witness

Companies Icon

2,500+

Companies Served

92 Net Promoter Score

+86

Net Promoter Score - Our Customers Love Us!