ISO/IEC 42001Artificial intelligence management

Proporciona requisitos para establecer, implementar, mantener y mejorar un sistema de gestión de inteligencia artificial. La certificación está disponible mediante solicitud de evaluación de alcance y propuesta; el organismo emisor se identifica antes de contratar.

ISO/IEC 42001 puede relacionarse con el AI Act y otros marcos regulatorios, pero no reemplaza la evaluación legal aplicable. La certificación está disponible mediante solicitud de evaluación de alcance y propuesta; el organismo emisor se identifica antes de contratar.

It may be relevant for organizations that develop, provide or use AI systems and need to organize responsibilities, risks, impacts and evidence. Applicability depends on the context, the uses and the defined scope.

The time depends on the scope, the AI systems included, existing governance and the evidence available. If the organization already has ISO/IEC 27001, part of the management structure can serve as an internal reference.

Both standards follow a compatible management system structure. Integrating them can reduce duplication when the scope and processes allow it; the actual effort depends on the context and the available evidence.

Yes, it can be relevant when an organization uses its own or third-party AI systems. Applicability and scope depend on the use, the context, the responsibilities and the associated impacts.

There is no list price: the proposal is sized on standard, scope, sites, headcount, activities, system complexity and delivery mode. The request is reviewed first and the proposal is then issued.

Findings are documented and classified. The organization submits correction, root cause and corrective action with evidence; the audit team evaluates it and only then does the file go to decision.

A competent function separate from the audit team. Those who audit do not decide, and no outcome is anticipated before that review.

In the public certificate register, by code.

Verify a certificate