ISO 42001

ISO/IEC 42001 is an international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS).

Gap Analysis - AKRUP begins every ISO 42001 engagement with a structured Gap Analysis to evaluate your organisation’s current readiness for certification. By reviewing your existing documentation and conducting targeted interviews with key personnel, we identify how closely your existing systems and practices align with the ISO 42001 standard for Artificial Intelligence Management Systems (AIMS). This analysis provides a clear picture of where you stand today and highlights the specific areas that need to be addressed to meet certification requirements. You'll receive a practical, actionable roadmap tailored to your organisation’s needs and AI maturity level.

Implementation - Following the gap analysis, our consultants provide end-to-end support for the implementation of your AIMS. We help you develop and formalise all required ISO 42001 documentation, from risk management frameworks and ethical AI guidelines to governance structures and impact assessments. Where appropriate, we will adapt and enhance your current Information Security Management System (ISMS) to incorporate AI-specific requirements. To ensure a smooth and efficient implementation, we provide full project management services—coordinating timelines, tasks, and deliverables across teams to reduce internal workload and ensure timely compliance.

Audit - When you're ready to undergo certification, AKRUP will assist you in selecting the most suitable ISO 42001-accredited audit provider, taking into account your industry, geographical reach, and operational complexity. We conduct internal readiness checks and guide your team in preparing for the audit. During the actual audit process, our consultants act as your representative—clearly presenting your systems and controls to auditors, responding to queries, and helping ensure a successful outcome.

Post Audit - Certification is not the end—it’s the beginning of a continuous improvement cycle. AKRUP provides ongoing post-audit support, including assistance with follow-up assessments, addressing nonconformities, and embedding continual improvement processes within your AIMS and ISMS. We help you maintain confidence in your compliance and demonstrate to stakeholders that your AI governance remains robust, responsible, and aligned with best practices.

AIMS Maintenance - To maintain ISO 42001 compliance over time, AKRUP offers annual AIMS maintenance services. We review and update your AI-related policies, processes, risk registers, and documentation to reflect changes in technology, legislation, and business objectives. Our maintenance program also includes periodic internal audits, management reviews, and support for ongoing data and algorithm governance—ensuring your AIMS remains both effective and future-proof.

ISO/IEC 42001 – AI Management System Standard – It is the first international standard that provides guidelines for establishing, implementing, maintaining, and improving an Artificial Intelligence Management System (AIMS).

Focuses on Responsible AI – The standard ensures organizations develop and use AI in an ethical, transparent, and accountable manner, addressing risks related to bias, security, and fairness.

Risk Management for AI Systems – ISO 42001 emphasizes identifying, assessing, and mitigating AI-related risks to ensure safe and reliable AI deployment.

Applicable Across Industries – The standard is designed for any organization developing, deploying, or using AI, including tech companies, healthcare, finance, and government sectors.

Integration with Other Standards – It aligns with ISO 27001 (information security) and ISO 9001 (quality management), enabling organizations to integrate AI governance into their existing management systems.

Certification for Compliance – Organizations can seek certification to demonstrate their commitment to responsible AI practices, improving trust and regulatory compliance.