ISO/IEC 42001
Build an AI management system that stands up to scrutiny
ISO/IEC 42001 is the international standard for AI management systems. It sets out how an organisation should govern AI responsibly: who’s accountable, how risks and impacts are assessed, what controls are in place, and how all of it is monitored and improved over time.
​
We help you design and implement an AI management system aligned to the standard, sized to your organisation and built into the way you already work. Whether your goal is stronger governance, a competitive edge in tenders, or formal certification, we’ll get you there without the enterprise overhead.
Is this for you?
When ISO/IEC 42001 makes sense
If any of these apply, an AI management system aligned to the standard is worth considering.
“Tenders are asking about AI governance”
Government and enterprise buyers want evidence you manage AI responsibly.
“AI is becoming core to how we operate”
AI now supports important decisions, products or services, and the stakes are higher.
“We want to be certified”
You’re aiming for formal certification and need to be ready for audit.
.webp)
The standard
What we work through with you
Context and scope. Defining which AI systems, activities and parts of the organisation are covered.
Leadership and policy. Clear commitment, an AI policy and defined roles from the top down.
Risk and impact assessment. Identifying and treating AI risks, and assessing impacts on people and society.
Controls. Putting the right controls in place across the AI lifecycle, from design and data to deployment and use.
Monitoring and improvement. Measuring performance, running internal audits, and continually improving.
How it works
A clear path to alignment
Our ISO/IEC 42001 work runs on ValiDATA’s own platform. A short context interview pre-drafts your management system, so your team spends time reviewing, not writing from scratch.
01
Gap analysis
We assess where you stand against the standard and what’s missing.
02
Design
We design the policies, processes and controls your system needs.
03
Implement
We help embed the system into day-to-day operations.
04
Audit readiness
We run an internal audit to check you’re ready for certification.
Our gap analysis uses ValiDATA’s own purpose-built tools, mapping your organisation against every requirement of the standard.
What you receive
An AI management system you can stand behind
Tailored to your organisation, written in plain English, and ready for your team to use from day one.
01
Gap analysis report
A clause-by-clause view of where you meet the standard and where you don’t.
02
Scope, policy and roles
Your AIMS foundations drafted for you: context, scope, AI policy and responsibilities.
03
AI inventory, risk register and Statement of Applicability
Every AI system recorded, its risks assessed, and the controls that apply.
04
Internal audit and management review
Objective findings on your readiness for certification, and the review the standard requires.
Not ready for the full standard yet? Start with our [AI Policy & Governance] service. It’s designed to grow into an ISO/IEC 42001-aligned system.
Our credentials
Certified in the standard we implement
Our team holds ISO/IEC 42001 qualifications across implementation, audit and foundation level, so we understand the standard from both sides: how to build a management system, and how an auditor will assess it.
Jason Jordan
ISO/IEC 42001 Lead Auditor
Patrick White
ISO/IEC 42001 Lead Implementer
Craig Lingard
ISO/IEC 42001 Foundation
These are individual professional qualifications. ValiDATA AI is not a certification body. Formal certification is carried out by an independent, accredited certification body.
Get in touch
Find out how close you are
Start with a free 20-minute call. We’ll talk through your goals for ISO/IEC 42001 and what the path to alignment looks like for your organisation.
Not sure where you stand yet? Start with an AI Readiness Assessment.