Overview
EN ISO/IEC 42001:2026 – "Information technology - Artificial intelligence - Management system (ISO/IEC 42001:2023)" – is an international standard developed by CEN for organizations that develop, provide, or use products and services utilizing artificial intelligence (AI). This standard specifies requirements and provides guidance for establishing, implementing, maintaining, and continually improving an AI management system within the organizational context, supporting the responsible and effective use of AI technologies.
EN ISO/IEC 42001:2026 is applicable to organizations of any size, type, or nature. The standard helps organizations manage AI-related risks, responsibilities, and expectations from interested parties, aiming to ensure that AI systems are deployed and operated in line with stakeholder requirements and applicable regulations.
Key Topics
- AI Management System Structure: The standard follows a harmonized structure common to international management system standards, facilitating alignment with quality, safety, security, and privacy systems.
- Leadership and Commitments: Requirements for top management leadership, including the establishment of AI policies and clear allocation of roles, responsibilities, and authorities.
- Risk and Opportunity Management: Guidance for identifying, assessing, and treating AI-related risks and opportunities using a risk-based approach.
- Stakeholder Requirements: Processes to identify and meet the needs and expectations of internal and external interested parties, including regulatory and ethical considerations.
- Operational Controls: Requirements for operational planning, control of AI systems, documented information, and AI system impact assessment.
- Performance Evaluation: Procedures for monitoring, measurement, internal audits, and management reviews, focused on the performance and continual improvement of the AI management system.
- Continual Improvement: Mechanisms for nonconformity management, corrective action, and enhancement of AI management processes.
Applications
Organizations benefit from implementing EN ISO/IEC 42001:2026 in various ways:
- Governance of AI Systems: Establishes a structured management approach to govern AI activities, ensuring accountability and traceable decision-making.
- Trust and Compliance: Demonstrates commitment to responsible AI usage, supporting compliance with legal, regulatory, and ethical requirements.
- Risk Management: Proactively addresses the unique risks associated with AI, such as transparency, explainability, data quality, and continuous learning.
- Stakeholder Confidence: Provides evidence of a systematic and auditable approach to managing AI, increasing trust among clients, partners, regulators, and the public.
- Alignment with Business Objectives: Assists organizations in integrating AI management with their business processes and objectives, supporting both innovation and control.
Related Standards
EN ISO/IEC 42001:2026 is designed to work in conjunction with existing standards, enhancing overall management system effectiveness. Key related standards include:
- ISO/IEC 22989 – Artificial intelligence concepts and terminology
- ISO/IEC 23894 – Artificial intelligence risk management
- ISO/IEC 27001 – Information security management systems
- ISO 9001 – Quality management systems
- ISO/IEC 38507 – Governance implications of the use of artificial intelligence by organizations
By adopting EN ISO/IEC 42001:2026, organizations can establish robust, responsible AI management frameworks that safeguard stakeholder interests, foster innovation, and ensure organizational resilience in the rapidly evolving AI landscape. This standard is a vital tool for any organization that seeks to harness the benefits of artificial intelligence while maintaining ethical oversight and regulatory compliance.
