GLI® Secure ISO/IEC 42001 Certification.
ISO/IEC 42001 is the world’s first AI management system standard, providing valuable guidance for this rapidly changing field of technology.
Have your AI management processes audited against the ISO 42001 standard and obtain certification from GLI Secure.
About the Standard
What is ISO/IEC 42001?
ISO/IEC 42001 is an international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS) within organizations. It is designed for entities providing or utilizing AI-based products or services, ensuring responsible development and use of AI systems.
It addresses the unique challenges AI poses, such as ethical considerations, transparency, and continuous learning. For organizations, it sets out a structured way to manage risks and opportunities associated with AI, balancing innovation with governance.
Ready to begin
Learn how certification builds trust with customers, partners, and regulators.
Certification
What does it mean to be certified?
Certification to ISO/IEC 42001 is one way to demonstrate to stakeholders and customers that you are committed and able to establish policies and objectives, as well as processes to achieve those objectives, in relation to the responsible development, provision or use of AI systems. Holding a certificate from an accredited conformity assessment body brings an additional layer of confidence, as an accreditation body has provided independent confirmation of the certification body’s competence.
Who is it for?
How long is it valid?
The certification is valid for 3 years. When your certification expires you will be required to follow a recertification process to maintain your ISO/IEC 42001 certification.
As with other ISO management system standards, companies implementing ISO/IEC 42001 can decide whether they want to go through a certification process. Some organizations implement the standard to benefit from the best practice it contains, while others also get certified to reassure customers and clients.
Requirements
What are the
requirements?
Certification requires organizations to implement the requirements found within the ISO/IEC 42001:2023 standard. Among them are Clause 4 – Context of the organization, Clause 5 – Leadership, Clause 6 – Planning, Clause 7 – Support, Clause 8 – Operation, Clause 9 – Performance Evaluation, Clause 10 – Improvement, and Annex A – Reference control objectives and controls.
Clauses 4–6
Context of the organization, Leadership, and Planning: understand your AI landscape and set responsible objectives.
Clauses 7–8
Support and Operation: resources, awareness, communication, and the day-to-day running of your AIMS.
Clauses 9–10
Performance Evaluation and Improvement: measure, audit, and continually improve your AIMS.
Annex A Controls
Reference control objectives and controls for the responsible development, provision, and use of AI systems.
How does the certification process work?
Certification audits are performed through an onsite visit to the organization’s location. The audit consists of a documentation review against the standards requirements, with interviews being performed, observation of activities, as well as control testing to determine the operating effectiveness of the controls.
How GLI Secure approaches your audit
Certification Bodies (CBs) are public and private businesses accredited by the Standards Council of Canada (SCC) who have met the requirements of the SCC. CBs verify that businesses have met all the security controls for certification using assessment criteria developed by the standard’s issuing body, such as the International Organization for Standardization (ISO). GLI Secure is an accredited certification body. As Canada’s national accreditation body, the SCC rigorously assesses the experts who certify organizations.
To access the PDF with full details, please click on the links below:
Ready to simplify compliance and stay audit-ready year-round? With GLI Secure, compliance becomes clear, manageable, and strategic.
Gus Fritschie
SVP Information Security Services
