# ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system

- **Record type**: Policy instrument
- **Jurisdiction**: International organisations (OECD, UNESCO, UN, G7, ISO)
- **Instrument type**: Standard
- **Status**: Voluntary standard
- **Binding**: No — guidance, strategy or standard
- **Issuing body**: ISO/IEC JTC 1/SC 42
- **Adopted**: 2023-12-18

## In brief

ISO/IEC 42001:2023 AI management system is a non-binding standard of International organisations (OECD, UNESCO, UN, G7, ISO), issued by ISO/IEC JTC 1/SC 42. Its current status is voluntary standard. Voluntary; any organisation developing, providing or using AI systems. The first certifiable management-system standard for AI.

## Summary

The first certifiable management-system standard for AI. It specifies requirements for establishing, implementing, maintaining and improving an AI management system within an organisation: context and leadership, AI policy, risk and impact assessment, objectives, resources and competence, operational controls across the AI lifecycle, performance evaluation and improvement, with Annex A controls on data, transparency, human oversight, third parties and responsible use. Certification is voluntary but increasingly requested in procurement; regulators reference it as evidence of governance.

## Scope

Voluntary; any organisation developing, providing or using AI systems. This site does not reproduce the standard's text.

## Notes on dates

Dates are taken from the linked official source; a reviewer should confirm in-force and application dates before relying on them.

## Provenance

- **Permanent id**: AIPT-POL-0102 (https://aipolicytracker.org/id/AIPT-POL-0102; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/policies/iso-iec-42001-2023-ai-management-system
- **Official source**: https://www.iso.org/standard/42001
- **Source document**: ISO/IEC 42001:2023
- **Published by**: International Organization for Standardization
- **Review status**: verified
- **Confidence**: high
- **Facts last confirmed**: 2026-09-26
- **Confirmed by**: Bhaskar Bhatt (see https://aipolicytracker.org/reviewers)
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system" [AIPT-POL-0102, record version 1, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-POL-0102 (accessed 27 October 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.