ISO/IEC 42001 Assess

compliance governance security certification ai-management standard assess sec may-2026 iso

May 2026

Overview

ISO/IEC 42001 is the international management system standard for AI, analogous to ISO 27001 for information security (ISO/IEC 42001:2023).

Assess for organizations pursuing certifiable AI management systems. It frames processes; it does not replace technical controls or OWASP-style testing.

Adoption Signals

AWS announced accredited ISO/IEC 42001 certification for Amazon Bedrock, Amazon Q Business, Amazon Textract, and Amazon Transcribe on 25 November 2024, issued by ANAB-accredited Schellman, and describes itself as the first major cloud provider to do so (AWS ML Blog).
Anthropic received accredited certification of its AI management system on 13 January 2025, also from Schellman (Anthropic).
Microsoft 365 Copilot, first certified in March 2025, was recertified in 2026 with zero non-conformities, and the certified scope grew from two to three AI systems by adding Copilot Studio (Help Net Security).
CEN-CENELEC JTC 21 put prEN 18286, the draft quality-management standard for EU AI Act purposes, to public enquiry from 30 October to 27 December 2025; it maps onto ISO/IEC 42001 in an annex and is meant to extend an existing AI management system rather than replace it (CMS, Cloud Security Alliance).

Risks

No EU AI Act presumption of conformity. Presumption only arises from harmonised standards cited in the Official Journal; prEN 18286 was still a draft at the end of 2025 and was expected to be finalised in late 2026 (CMS, Cloud Security Alliance). A 42001 certificate alone does not answer a notified body or market surveillance authority.
Scope is narrower than the logo. AWS certified four named services and Microsoft three named AI systems (AWS ML Blog, Help Net Security). Supplier due diligence has to read the scope statement, not just the certificate.
Paper compliance. The standard requires risk assessment, impact assessment, and controls, but it does not define how much adversarial testing or evaluation is enough. Without CI evals and red teaming, an audit mostly checks that documents exist.
Uneven auditor maturity. AI-specific requirements for certification bodies only arrived with ISO/IEC 42006 in July 2025 (ISO/IEC 42006:2025); certificates issued before then, including the AWS and Anthropic ones, were audited without them. Check that the auditor is accredited for 42001, not only for 27001.

Pros & Cons

Advantages

Accredited certification is now an established procurement signal among large AI suppliers: AWS certified Amazon Bedrock and three other AI services in November 2024, Anthropic followed in January 2025, and Microsoft 365 Copilot was recertified in 2026 with zero non-conformities.
It follows the same management-system structure as ISO/IEC 27001, so organisations with an ISMS can extend existing policies, risk registers, internal audits, and management reviews instead of building AI governance from scratch.
ISO/IEC 42006:2025 now sets specific competence and audit requirements for the bodies that certify against ISO/IEC 42001, which makes certificates from different auditors more comparable.

Disadvantages

ISO/IEC 42001 is not a harmonised standard under the EU AI Act and gives no presumption of conformity; the Article 17 quality-management route is being written separately as prEN 18286.
A certificate covers a declared scope, often a handful of named products or AI systems, so it says little about AI use outside that scope in the same company.
It certifies a management system, not model behaviour: it does not prescribe red-teaming depth, evaluation thresholds, or prompt-injection defences, so a certified organisation can still ship an insecure AI feature.

Recommendation

ISO/IEC 42001 is rated Assess as a general recommendation, but move faster if you sell AI-enabled products to enterprise or public-sector buyers who already ask for it in questionnaires. Start with a gap assessment against your ISO 27001 ISMS: AI policy, AI system inventory, AI risk and impact assessment, supplier controls, and monitoring are the main additions. Choose a certification scope that matches real products, not the whole company on day one.

For EU providers of high-risk systems, plan one management system that can later take the prEN 18286 controls instead of running two programmes. The Digital Omnibus moved the Annex III high-risk obligations to 2 December 2027 (Hunton), which leaves time to wait for the final harmonised standard. Pair the management system with technical evidence (evaluation pipelines, red-team reports, the OWASP LLM Top 10 as a test baseline) so that audits check working controls and not just documents.