What ISO/IEC 42001 is
ISO/IEC 42001:2023 is the international standard for an artificial intelligence management system (AIMS): the policies, roles, processes and records an organisation uses to develop, provide or use AI responsibly and to keep improving how it does so. It follows the same structure as other ISO management system standards, such as ISO 9001, ISO 14001 and ISO/IEC 27001, which makes it practical to integrate with systems you already run.
What you get
- Gap assessment and implementation plan. Where your current practice sits against each clause and the Annex A controls, and a sequenced plan to close the gaps.
- AI policy, procedures and Annex A control set. Written to fit how your organisation actually works, not a template library.
- Documented information. Registers, impact assessments, risk treatment records and the evidence trail the standard expects.
- Training, internal audit readiness and corrective action. So the system keeps running after the project ends.
Why management system experience matters
An AI management system succeeds or fails on the same things as any other management system: clear obligations, owned controls, records kept as work happens, and nonconformances that actually get closed out. Our founder has spent years making those systems work on major infrastructure, energy and mining projects under regulator scrutiny. See about Meriam.
Certification
Certification to ISO/IEC 42001 is issued by independent certification bodies, not by ISO and not by consultants. We recommend a body accredited for ISO/IEC 42001 (in Australia and New Zealand, accreditation is by JAS-ANZ). Meriam prepares organisations for that audit; we do not issue certificates.
