ISO 42001

1. 2026-10-19 Medium
   European Commission publishes first harmonised standard EN 18286:2026 supporting AI Act implementation

   The European Commission has published EN 18286:2026 — Artificial intelligence - Quality management system for EU AI Act regulatory purposes — as the first harmonised standard …

   New document Action required

2. 2026-10-14 Low
   ISO/IEC 42001 addresses security threats and compromises specific to artificial intelligence systems

   ISO/IEC 42001 has been published to address security threats and compromises specific to artificial intelligence (AI) systems. The standard provides guidance to help organizations understand the …

   New document

1. 2025-07-07 ISO/IEC 42006:2025 is published: requirements for bodies auditing and certifying AI management systems
2. 2023-12-18 ISO/IEC 42001:2023 is published

1. 2023-12-18
   ISO/IEC 42001:2023 Major versionCurrent

   First edition. source

Any organization that provides, develops or uses AI systems. It is voluntary.

Who it is for

Organizations providing or using products or services that utilize AI systems, regardless of size, type and nature. source

What it requires

Establishing, implementing, maintaining and continually improving an AI management system within the context of the organization. source

Aim

To help the organization develop, provide or use AI systems responsibly and meet applicable requirements and obligations to interested parties. source

Legal status

ISO standards are voluntary and contain no contractual, legal or statutory requirements; national laws take precedence. source

Third-party certification of the AI management system by bodies that follow ISO/IEC 42006 on top of ISO/IEC 17021-1.

Third-party

Certification of an AI management system is a third-party conformity assessment activity, performed by third-party conformity assessment bodies. source

Rules for certifiers

ISO/IEC 42006:2025 adds requirements to ISO/IEC 17021-1 for bodies auditing and certifying an AI management system according to ISO/IEC 42001. source

Accreditation use

ISO/IEC 42006 can be used as a criteria document for accreditation or peer assessment. source

A voluntary standard; it sets no legal requirements and does not replace national laws.

Legal force

ISO standards are voluntary and contain no contractual, legal or statutory requirements. source

Laws prevail

Voluntary standards do not replace national laws, with which users are understood to comply and which take precedence. source

1. Standard ISO/IEC 42001:2023 (catalogue entry; paid standard)
2. Standard ISO/IEC 42006:2025 Requirements for bodies certifying AI management systems (catalogue entry)

1. EU AI Act

   The EU AI Act is law with obligations and fines by AI risk category; ISO/IEC 42001 is a voluntary, certifiable management system standard.

2. NIST AI RMF

   The NIST AI RMF is a voluntary US framework that organizations apply themselves; ISO/IEC 42001 can be certified by third-party bodies.

3. ISO 27001

   ISO/IEC 27001 manages information security; ISO/IEC 42001 manages the responsible development, provision and use of AI systems.

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 19 September 2026. Subscribe to ISO 42001 (RSS)