About Us
Oscar System
ISO Standards & Compliance
ISO Standards & Compliance
Advisory Services
Environmental & ESG
Health & Safety Services
Create a structured approach to how your organisation develops, provides or uses AI. We help you define responsibilities, assess risks and impacts, and establish governance processes and documentation aligned with an ISO/IEC 42001 AI management system.
ISO/IEC 42001:2023 sets requirements for an Artificial Intelligence Management System for organisations that develop, provide or use AI products or services. It supports governance, responsibilities, risk assessment, AI system impact assessment and continual improvement. It can be integrated with an information security management system, but it is a separate standard and does not replace applicable AI or data protection law.
Current standard checked 4 November 2026: ISO/IEC 42001:2023.
We begin by understanding how artificial intelligence is currently being used across your organisation, including existing AI systems, governance arrangements, associated risks and current controls. This provides a clear baseline for developing an effective AI Management System (AIMS).
We work with your team to design and implement an AI Management System (AIMS), including governance, policies, processes, risk management, and operational controls. The objective is to enable responsible AI that supports innovation while meeting ethical, legal and regulatory expectations.
We help embed the AI management system through implementation support, staff awareness, AI risk and impact assessments, internal audits and management reviews. Readiness is assessed against the agreed scope and evidence; consultancy does not guarantee certification.
Critical Path does not audit or certify its own consultancy work. Certification is carried out by an independent certification body to ensure impartiality. We work with UKAS-accredited, ANAB-accredited and non-accredited certification bodies, helping you select the most appropriate certification provider based on your business objectives and market requirements.
ISO/IEC 42001 helps organisations govern how they develop, provide and use artificial intelligence. A practical AI Management System brings together responsibilities, controls and review processes to support responsible AI use.
Bring AI policies, objectives and decision-making processes into one management system that reflects how your organisation uses AI.
Bring AI policies, objectives and decision-making processes into one management system that reflects how your organisation uses AI.
Clarify who approves, manages and oversees AI use, so your team knows where accountability sits.
Clarify who approves, manages and oversees AI use, so your team knows where accountability sits.
Identify AI-related risks, assess their significance and prioritise actions around your organisation’s activities and objectives.
Identify AI-related risks, assess their significance and prioritise actions around your organisation’s activities and objectives.
Consider how AI affects people and your organisation, bringing ethical concerns into everyday decisions and controls.
Consider how AI affects people and your organisation, bringing ethical concerns into everyday decisions and controls.
Keep clear records of key decisions and communicate relevant information about how AI is used and managed.
Keep clear records of key decisions and communicate relevant information about how AI is used and managed.
Give teams a common approach to AI use, reducing uncertainty when adopting new tools or changing existing processes.
Give teams a common approach to AI use, reducing uncertainty when adopting new tools or changing existing processes.
Review AI performance and impacts over time, so changes and emerging problems receive appropriate attention.
Review AI performance and impacts over time, so changes and emerging problems receive appropriate attention.
Explore useful AI opportunities within an agreed governance framework, with risks considered before new uses are introduced.
Explore useful AI opportunities within an agreed governance framework, with risks considered before new uses are introduced.
Demonstrate how AI responsibilities and risks are managed, giving customers and partners a clearer basis for confidence.
Demonstrate how AI responsibilities and risks are managed, giving customers and partners a clearer basis for confidence.
Use reviews, findings and corrective actions to improve your AI management system as your organisation and technology develop.
Use reviews, findings and corrective actions to improve your AI management system as your organisation and technology develop.
ISO/IEC 42001:2023 is the current international standard for artificial intelligence management systems (AIMS). It is relevant to organisations that develop, provide or use AI-based products and services. It provides a framework for AI governance, responsibilities, risks and continual improvement. Whether certification is appropriate depends on your activities, objectives and stakeholder requirements.
Our ISO 42001 consultancy can include reviewing existing AI governance, identifying gaps, defining the management system scope, documenting responsibilities and supporting risk management and implementation. We can help establish an AIMS or improve arrangements already in place. The support is tailored to your organisation’s use of AI and the scope agreed with you.
No. ISO 42001 certification concerns an organisation’s AI management system within a defined scope. It is not a blanket approval of every AI product, a guarantee of error-free outputs or automatic compliance with all AI, privacy and sector-specific laws. Critical Path provides consultancy; an independent certification body assesses conformity and makes certification decisions.
