ISO/IEC 42001 Foundation
ISO/IEC 42001 provides a model for establishing, implementing, operating, monitoring, maintaining, and continuously improving an Artificial Intelligence Management System (AIMS).
Key Topics
ISO/IEC 42001:2023 is the first international management system standard for artificial intelligence. It supports organizations in developing, deploying, and using AI systems responsibly—tailored to their own requirements, objectives, and risks. The standard follows the harmonized structure of ISO management systems and can therefore be seamlessly integrated into existing systems such as ISO/IEC 27001 or ISO/IEC 20000.
ISO/IEC 42001 defines the requirements for an AIMS and covers, in particular:
- AI Management System (AIMS) and the organization’s context
- Leadership, AI policy, and roles and responsibilities
- AI risk assessment, risk treatment, and Statement of Applicability (SoA)
- AI System Impact Assessment
- Operation, Performance Evaluation, Internal Audits, and Management Review
- Nonconformities, Corrective Actions, and Continuous Improvement
- Control Objectives and Controls in accordance with Annex A (9 subject areas, 38 controls)
- Certification of an organization to ISO/IEC 42001
Objectives
After the course, participants will understand:
- the scope and purpose of ISO/IEC 42001 and how the standard can be applied
- the key terms and definitions of the ISO/IEC 42000 family, including AI terminology from ISO/IEC 22989
- the fundamental requirements for an AIMS according to ISO/IEC 42001 and the need for continuous improvement
- the processes, their objectives, and the overarching requirements
- the requirements for defining the scope and applicability
- the use of controls to reduce AI risks
- the purpose of internal audits and external certification audits, their procedures, and the associated terminology
- the relationship to related international standards such as ISO/IEC 22989, ISO/IEC 23894, ISO/IEC 42005, ISO/IEC 27001, and ISO/IEC 27701
Prerequisites
There are no formal prerequisites. A basic understanding of management systems or AI applications in one’s own environment is helpful but not required.
Target Audience
Internal and external individuals who play a role in the management, governance, or auditing of AI systems, for example:
- Executives and members of senior management
- AI, information security, and data protection officers
- IT managers, product and process managers responsible for AI systems
- Employees in compliance, risk management, and audit
- Consultants who support organizations in establishing an AIMS
Certificate
The course concludes with the official exam administered by APMG International. Upon passing the exam, participants receive the “ISO/IEC 42001 Foundation Certificate” from APMG.
- Exam language: English
- Exam format: 50 multiple-choice questions, 1 point each
- Passing score: 25 points (50%)
- Duration: 40 minutes, closed book (no aids)
- Administered online or on paper; online exams also available with remote proctoring (ProctorU)
Course Materials
The course materials (in English) include the Glenfis training slides with exercises and sample questions for each module, as well as a practice exam for targeted exam preparation.
Execution
- Class with max. 15 participants
- Can be performed with the following simulation: