ISO/IEC 42001:2023 AI management system: requirements, deadlines and compliance actions
ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system
What is ISO/IEC 42001:2023 AI management system?
The first certifiable management-system standard for AI. It specifies requirements for establishing, implementing, maintaining and improving an AI management system within an organisation: context and leadership, AI policy, risk and impact assessment, objectives, resources and competence, operational controls across the AI lifecycle, performance evaluation and improvement, with Annex A controls on data, transparency, human oversight, third parties and responsible use. Certification is voluntary but increasingly requested in procurement; regulators reference it as evidence of governance.
Who does it apply to?
Voluntary; any organisation developing, providing or using AI systems. This site does not reproduce the standard's text.
- Sectors
- Cross-sector / all sectors
- AI use cases
- Government procurement of AI
When do the requirements apply?
Dates are taken from the linked official source; a reviewer should confirm in-force and application dates before relying on them.
Official sources
-
ISO/IEC 42001:2023
International Organization for Standardization · 18 Dec 2023 · Tier 1 source
Change history
Record version 1: Added in the September 2026 global coverage expansion from the official source listed; reviewer to confirm dates, status and scope against the source text.. Full edit history is in the GitHub repository.
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.