ISO/IEC 42001

An international standard for AI management systems originating in ISO, with no published OJ reference under the EU AI Act's harmonised-standards mechanism as of mid-2026. Regardless of any European adoption status, applying ISO/IEC 42001 does not produce an Article 40 presumption unless a Commission OJ reference has been published for it under Regulation (EU) No 1025/2012. It may constitute an alternative adequate means subject to a gap analysis against specific Article 17 requirements; verify current OJ status before advising.

The international standard for AI management systems (published 2023) that defines the governance, policy, and control structure an organization should have for responsible AI; can serve as a baseline for internal audit governance-framework assessments or as the basis for third-party certification that boards can require of vendors or of their own AI management function.

The first international management-system standard specifically for artificial intelligence (International Organization for Standardization, published December 2023), whose data governance control areas offer a useful reference structure for documenting and auditing AI data handling, even for a practice too small to pursue formal certification.

the international AI management system standard, published December 2023, whose Clause 7.2 on competence requires an organization to determine the competence needed for AI-governance-relevant roles and retain documented evidence that people hold it.

The first international management-system standard for AI (2023), giving organizations a certifiable structure for an AI management system, analogous to what ISO/IEC 27001 provides for information security.