AI Governance Engineer
GitHub

ISO/IEC 42001

By Updated

The ISO/IEC standard (2023) that specifies requirements for an AI management system, certifiable by accredited bodies 1. As of 2026-09-24 it is not a harmonised standard under the AI Act, so certification gives no presumption of conformity 2.

Developed in
ch. 22, The management-system trio
ch. 08, ISO/IEC 42001, 42005 and 42006
Chapters
ch. 07, Maturity Model · ch. 08, Regulatory Map · ch. 22, Principles & Standards
Compared side by side
ISO 42001 vs EU AI Act · NIST AI RMF vs ISO 42001
Source
2 numbered references, listed below

Where it is used

19 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

ISO/IEC 42001: mentions per chapter86 mentions of the term across 19 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter00 Preface: 4 mentions00 Preface401 Definition: 1 mention01 Definition102 Why Now: 4 mentions02 Why Now403 Values & Principles: 2 mentions03 Values & Principles204 The Stack: 9 mentions04 The Stack906 The Role: 3 mentions06 The Role307 Maturity Model: 6 mentions07 Maturity Model608 Regulatory Map: 11 mentions08 Regulatory Map1110 Reading List: 3 mentions10 Reading List311 AI Defined: 1 mention11 AI Defined112 Governance Program: 14 mentions12 Governance Program1413 Risk Management: 3 mentions13 Risk Management314 Development: 4 mentions14 Development415 Deployment: 3 mentions15 Deployment317 Incidents: 3 mentions17 Incidents318 EU AI Act: 2 mentions18 EU AI Act219 Privacy & AI: 3 mentions19 Privacy & AI322 Principles & Standards: 9 mentions22 Principles & Standards923 AI Agents: 1 mention23 AI Agents1No mentions in the other 4 chaptersSource: the Body of Knowledgev0.5.0
ISO/IEC 42001: mentions per chapter86 mentions of the term across 19 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter00 Preface: 4 mentions40001 Definition: 1 mention10102 Why Now: 4 mentions40203 Values & Principles: 2 mentions20304 The Stack: 9 mentions9040506 The Role: 3 mentions30607 Maturity Model: 6 mentions60708 Regulatory Map: 11 mentions110810 Reading List: 3 mentions31011 AI Defined: 1 mention11112 Governance Program: 14 mentions141213 Risk Management: 3 mentions31314 Development: 4 mentions41415 Deployment: 3 mentions3151617 Incidents: 3 mentions31718 EU AI Act: 2 mentions21819 Privacy & AI: 3 mentions319202122 Principles & Standards: 9 mentions92223 AI Agents: 1 mention123Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of ISO/IEC 42001 per chapter
ChapterMentionsCross-referenced
00 Preface4No
01 Definition1No
02 Why Now4No
03 Values & Principles2No
04 The Stack9No
05 Patterns0No
06 The Role3No
07 Maturity Model6Yes
08 Regulatory Map11Yes
10 Reading List3No
11 AI Defined1No
12 Governance Program14No
13 Risk Management3No
14 Development4No
15 Deployment3No
16 Fairness & XAI0No
17 Incidents3No
18 EU AI Act2No
19 Privacy & AI3No
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards9Yes
23 AI Agents1No

Patterns that use this term

33 pattern pages use the term; the 10 that use it most:

ISO/IEC 42001: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern01 Govern-as-Code02 Inventory05 AssuranceISO/IEC 42001Related terms (8)AI Act (EU) · RelatedAI Act (EU)AIMS · RelatedAIMSHarmonised standard · RelatedHarmonised standardHarmonized Structure (ISO) · RelatedHarmonized Structure (ISO)ISO/IEC 42005 · RelatedISO/IEC 42005Presumption of conformity · RelatedPresumption of conformityQMS (Art. 17) · RelatedQMS (Art. 17)STAR for AI · RelatedSTAR for AIPatterns using it most (6)Dataset Admission Gate, 3 mentions · Uses the termDataset Admission GateFRIA-as-Code, 3 mentions · Uses the termFRIA-as-CodeFramework Crosswalk, 4 mentions · Uses the termFramework CrosswalkIncident Pipeline, 3 mentions · Uses the termIncident PipelineUse-Case Intake & Risk Tiering, 3 mentions · Uses the termUse-Case Intake & Risk TieringVendor / Model Due-Diligence Gate, 3 mentions · Uses the termVendor / Model Due-Diligence
ISO/IEC 42001: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern01 Govern-as-Code02 Inventory05 AssuranceRelated terms (8)AI Act (EU) · RelatedAI Act (EU)AIMS · RelatedAIMSHarmonised standard · RelatedHarmonised standardHarmonized Structure (ISO) · RelatedHarmonized Structure (ISO)ISO/IEC 42005 · RelatedISO/IEC 42005Presumption of conformity · RelatedPresumption of conformityQMS (Art. 17) · RelatedQMS (Art. 17)STAR for AI · RelatedSTAR for AIPatterns using it most (6)Dataset Admission Gate, 3 mentions · Uses the termDataset Admission GateFRIA-as-Code, 3 mentions · Uses the termFRIA-as-CodeFramework Crosswalk, 4 mentions · Uses the termFramework CrosswalkIncident Pipeline, 3 mentions · Uses the termIncident PipelineUse-Case Intake & Risk Tiering, 3 mentions · Uses the termUse-Case Intake & Risk TieringVendor / Model Due-Diligence Gate, 3 mentions · Uses the termVendor / Model Due-DiligenceISO/IEC 42001
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of ISO/IEC 42001
FamilyItemRelation
Related termsAI Act (EU)Related
Related termsAIMSRelated
Related termsHarmonised standardRelated
Related termsHarmonized Structure (ISO)Related
Related termsISO/IEC 42005Related
Related termsPresumption of conformityRelated
Related termsQMS (Art. 17)Related
Related termsSTAR for AIRelated
Patterns using it mostDataset Admission Gate, 3 mentionsUses the term
Patterns using it mostFRIA-as-Code, 3 mentionsUses the term
Patterns using it mostFramework Crosswalk, 4 mentionsUses the term
Patterns using it mostIncident Pipeline, 3 mentionsUses the term
Patterns using it mostUse-Case Intake & Risk Tiering, 3 mentionsUses the term
Patterns using it mostVendor / Model Due-Diligence Gate, 3 mentionsUses the term
  • AIMS

    An AI management system: the governance structure, roles, controls and continual-improvement loop that ISO/IEC 42001 certifies.

  • ISO/IEC 42005

    ISO/IEC 42005:2025, the AI system impact-assessment standard (a companion to the AI Act's Article 27 FRIA and to ISO/IEC 42001 Annex A.5), giving a structured…

  • Harmonized Structure (ISO)

    The common clause layout and core text shared by ISO management-system standards such as ISO/IEC 42001, 27001 and 27701 and ISO 9001, which lets one…

  • Presumption of conformity

    The legal effect under AI Act Article 40: a high-risk system or GPAI model that conforms with OJ-cited harmonised standards is presumed to meet the…

  • Harmonised standard

    A European standard adopted on a Commission standardisation request.

  • QMS (Art. 17)

    The quality management system that AI Act Article 17 requires of high-risk providers; distinct from an ISO/IEC 42001 AIMS, which certifies a management system…

  • AI Act (EU)

    Regulation (EU) 2024/1689, the EU's horizontal, risk-tiered law for AI, amended by the Digital Omnibus.

  • STAR for AI

    CSA's security assurance and certification programme for AI, built on the AICM, with a self-assessment tier, an automated "Valid-AI-ted" tier and a Level 2…

Sources

  1. [1] ISO/IEC 42001:2023, AI management systems (referenced by identifier only; requirements for an AI management system; clause 10.2 nonconformity and corrective action). ISO/IEC. 2023. https://www.iso.org/standard/81230.html (verified: secondary)
  2. [2] Standardisation of the AI Act (no harmonised standard yet referenced in the Official Journal, so no presumption of conformity from any standard, ISO/IEC 42001 included; page last updated 2026-08-03; none found in the Publications Office index on 2026-09-24). European Commission. 2026-08-03. https://digital-strategy.ec.europa.eu/en/policies/ai-act-standardisation (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). ISO/IEC 42001. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/iso-iec-42001. CC BY 4.0

BibTeX

@misc{aige2026isoiec42001,
  author  = {Jorge García Aibar},
  title   = {{ISO/IEC 42001}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/iso-iec-42001}
}