Skip to main content
—
Framework library
Framework module · iso-42001-2023

ISO/IEC 42001

The first certifiable management system standard for AI — the ISO 27001 shape applied to how an organization builds and operates AI systems.

2023 · ISO/IEC 42001:2023 · published 2023-12-18

Standing today
Acquisition required

00Answer

from the registry record
What is ISO/IEC 42001?
The first certifiable management system standard for AI — the ISO 27001 shape applied to how an organization builds and operates AI systems.
Who does ISO/IEC 42001 apply to?
ISO/IEC 42001 applies to AI, technology, global, per ISO/IEC 42001:2023.
What is the current version of ISO/IEC 42001?
The current edition is 2023, issued by ISO/IEC 42001:2023 and published 2023-12-18. Source: https://www.iso.org/standard/42001.
What does an assessment under ISO/IEC 42001 require?
No control catalog has been ingested for ISO/IEC 42001 yet — the registry tracks it as roadmap (Modeled framework: we model the regime — control families and at least one crosswalk map on disk — but no source-pinned control catalog is ingested), so an assessment under this framework currently requires the authority's own catalog rather than a ControlFrame-parsed one.

01Standing

Acquisition required

Named, with the authority's acquisition path recorded; onboarding is refused until a control set is registered.

ISO/IEC 42001 cannot be onboarded yet: Acquisition required before authoritative verbatim inventory generation. Onboarding is enabled once a control set is registered, so a new project never opens into an empty workspace.

ISO/IEC 42001 cannot be onboarded yet: Acquisition required before authoritative verbatim inventory generation. Onboarding is enabled once a control set is registered, so a new project never opens into an empty workspace.

Request this frameworkAuthority source (opens in a new tab)

02Registry record

checked 2026-08-30
Registry status
Roadmap · modelledModeled framework: we model the regime — control families and at least one crosswalk map on disk — but no source-pinned control catalog is ingested.
Control units
Not on record — no catalog ingested and no authority-published count cited.
Control families
AI management system · Risk assessment · Impact assessment · AI lifecycle
Applies to
AI · technology · global
Verification
Primary — the issuing body's own page was read and states this version. checked 2026-08-30

03Version ledger

1 edition
2023Current edition2023-12-18

06Related frameworks

scored from registry facts
  1. EU AI ActRegulation (EU) 2024/1689

    Also applies to AI · The EU's risk-tiered regime for AI systems — prohibited practices, high-risk obligations, general-purpose model duties, and transparency requirements.

  2. ISO/IEC 238942023

    Also applies to AI · International guidance for integrating AI-specific risk management into organizations that develop, provide, deploy, or use AI systems. It complements ISO/IEC 42001 and is guidance, not a standalone certification.

  3. ISO/IEC 420052025

    Also applies to AI · International guidance for repeatable AI-system impact assessments across the system lifecycle. It complements ISO/IEC 42001, ISO/IEC 23894, and applicable AI laws; it is not an AI certification by itself.

  4. CSA AI Controls Matrixv1.1

    Also applies to AI · The Cloud Security Alliance's vendor-neutral control framework for cloud-based AI systems, with implementation and auditing guidance plus the companion AI-CAIQ. It is a control catalog, not by itself a certification or STAR for AI designation.

See control-level overlap in the Control Atlas
ISO/IEC 42001 | ControlFrame