7 clauses, 24 requirement areas
The auditable clauses of ISO/IEC 42001
Clauses 4 to 10 are the ones a certification auditor checks. Each page below walks one clause area by area, verified against the published structure of ISO/IEC 42001:2023 on August 25, 2026.
- Clause 4, 4 requirement areasContext of the organizationKnow your situation before you write a single policy.
- Clause 5, 3 requirement areasLeadershipAI governance fails from the top or it does not fail at all.
- Clause 6, 3 requirement areasPlanningDecide what can go wrong, and what good looks like, before you build.
- Clause 7, 5 requirement areasSupportThe unglamorous clause that decides whether the policy is real.
- Clause 8, 4 requirement areasOperationWhere the plan meets actual AI systems.
- Clause 9, 3 requirement areasPerformance evaluationCheck that the system works, on evidence, not vibes.
- Clause 10, 2 requirement areasImprovementThe standard assumes you will get things wrong; it audits what you do next.
Know the clauses. Then prove you can run them.
Reading a clause tells you what an auditor will look for. The AI Governance program drills the work itself, and the credential shows an employer you did it under assessment.