Clause 9, Performance evaluation
Check that the system works, on evidence, not vibes. Every requirement area of Clause 9, verified against the published structure of ISO/IEC 42001:2023 on August 25, 2026.
Clause 9 is the Check in Plan-Do-Check-Act. The organization monitors and measures the management system's performance, audits it internally on a schedule, and has top management review the whole thing.
This is the clause that separates a living management system from a certification prop. Internal audit findings are supposed to hurt a little; a run of clean audits usually means the audit is not looking.
The requirement areas
- 9.1 Monitoring, measurement, analysis and evaluation
Decide what to monitor and measure about AI performance and the management system, how, and when, then analyze the results.
- 9.2 Internal audit
Audit the management system at planned intervals against the standard's requirements and the organization's own.
- 9.3 Management review
Top management reviews the system at planned intervals: audit results, risk status, objectives, and opportunities to improve.
Clause 9 is a discipline before it is a document
Reading the clause tells you what an auditor will look for. The AI Governance program drills the work itself, and the credential shows an employer you did it under assessment.
Clause and subclause identifiers follow ISO/IEC 42001:2023 exactly; the wording is our plain-English paraphrase, and the standard's full text is sold by ISO at iso.org/standard/81230.html. Not affiliated with or endorsed by ISO or the IEC. Last verified: August 25, 2026.