Published in 2023, it follows the same management-system structure as ISO 27001 and is certifiable. It covers AI risk and impact assessment, data, transparency and oversight, which SOC 2 does not assess.
The ISO 42001 framework page covers its requirements.
Read more
Related terms
- EU AI Act
- The EU AI Act is the EU regulation setting obligations for AI systems by risk, from prohibited practices to high-risk systems and transparency duties.
- Information security management system
- An information security management system is the set of policies, processes and responsibilities an organization uses to manage information security risk.
- Management review
- Management review is the recurring review in which top management assesses whether the management system is still suitable, adequate and effective.