Governance, compliance and security
ISO/IEC 42001 fundamentals
Structure how you manage AI with the international standard, without unnecessary red tape.
ISO/IEC 42001 is the international standard for building an artificial intelligence management system (AIMS): a way to organise the use and development of AI consistently, auditably and in line with good practice. It is also a solid basis for demonstrating AI Act compliance.
This course explains the standard clause by clause with a practical approach: what it really requires, how to assess risks and impacts, how to choose the Annex A controls and what minimum documentation is needed. If you already have an ISO 9001 or ISO/IEC 27001 system, you will see how to integrate it.
The course is not an official auditor certification; it prepares the organisation to implement the standard and go for certification.
What you will learn
- Understand the structure and requirements of ISO/IEC 42001
- Design a proportionate AI management system (AIMS)
- Assess the risks and impacts of AI systems
- Select and justify the Annex A controls
- Prepare the documentation and an internal audit
Syllabus
8 modules, from the fundamentals to the final project.
-
The standard in context
- What an AI management system is
- Shared structure with ISO 9001 and ISO/IEC 27001
- Relationship with the AI Act
-
Context and leadership
- Interested parties and AIMS scope
- AI policy, roles and responsibilities
-
Planning
- AI risk assessment and treatment
- AI system impact assessment
- Statement of applicability
-
Annex A controls
- Policies, internal organisation and resources
- AI system lifecycle and data
- Information for interested parties, responsible use and third parties
-
Support and operation
- Competence, awareness and communication
- Minimum documented information
- Operational control of the lifecycle
-
Evaluation and improvement
- Monitoring, indicators and internal audit
- Management review
- Non-conformities and continual improvement
-
Integration and certification
- Integrating the AIMS with other management systems
- The certification process
-
Case study
- Designing the AIMS for a sample company
Tools you will practise with
- Statement of applicability template
- AI risk and impact register
- Internal audit checklist
Hands-on project
You design the AIMS for a sample organisation or your own, with the scope, the AI policy, the risk and impact assessment and a statement of applicability with justified controls.
Requirements
- Experience with management systems (ISO 9001, ISO/IEC 27001 or others) recommended.
Other courses
-
AI ethics and decision-making course
A practical method for deciding when and how to use AI responsibly.
- Duration: 4–6 hours
- Level: Beginner
-
AI governance and compliance course
A practical framework for using AI in an orderly way and meeting the AI Act without stifling innovation.
- Duration: 8 hours
- Level: Intermediate
-
Data protection and AI course (GDPR)
Use AI with personal data while complying with the GDPR by design.
- Duration: 6–8 hours
- Level: Intermediate
Related articles
-
Regulation
The AI Act for SMEs: your obligations and how to prepare
Guide to the EU AI Act for SMEs: what affects you if you use AI, deadlines after the Digital Omnibus, penalties and a five-step action plan.
9 min read
Want this course for your team?
We adapt the content, length and format to your company.