ISO/IEC 42001 AI Management System

What you will be able to do

• You will be able to explain what an AI Management System is and how ISO/IEC 42001 reuses the Annex SL structure shared with ISO/IEC 27001.
• You will be able to determine the organization's context, interested parties, and AIMS scope, and document leadership commitment and an AI policy.
• You will be able to identify your organization's AI roles and decide which clauses and controls apply when you act as a provider versus a user of AI systems.
• You will be able to run an AI risk assessment and an AI system impact assessment and connect their outputs to risk treatment.
• You will be able to select Annex A controls and produce a defensible Statement of Applicability with justified inclusions and exclusions.
• You will be able to operate the AIMS through performance evaluation, internal audit, and management review.
• You will be able to prepare for a certification audit by mapping Stage 1 and Stage 2 expectations and assembling the required evidence.

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   Foundations: What an AIMS Is and How 42001 Relates to 27001

   Understand what a management system is, what makes ISO/IEC 42001 specific to AI, and why it shares its skeleton with ISO/IEC 27001. You will learn the high-level structure of the standard and the unique role concepts that drive how it applies to your organization.

   2 lessons · 5 quiz questions

2. 02

   Context, Scope, and Leadership

   Define the organization's context and interested parties, draw a defensible AIMS scope, and establish the leadership commitment and AI policy that anchor the system. These clause 4 and clause 5 activities are where most AIMS implementations succeed or fail.

   2 lessons · 5 quiz questions · assignment

3. 03

   AI Risk, Impact Assessment, Annex A, and the SoA

   Run the assessments at the heart of the AIMS: AI risk assessment and the AI system impact assessment. Then learn how Annex A controls map to risks and how to produce a defensible Statement of Applicability with justified inclusions and exclusions.

   2 lessons · 5 quiz questions

4. 04

   Operating the AIMS, Internal Audit, and Certification Readiness

   Move from design to running system. Cover operation and performance evaluation, run an effective internal audit and management review, handle nonconformities, and prepare for the two-stage certification audit with the right evidence.

   2 lessons · 5 quiz questions · assignment