Model Online / On-Site
Duration
Modules 5 modules

Course Objective & Scope

ISO/IEC 42001 is the world's first certifiable AI Management System (AIMS) standard for organisations that develop, provide or use AI systems. Rather than reading clauses in the abstract, this course teaches teams step by step how to stand up a working AIMS tailored to their enterprise.

It covers organisational context and value-chain roles (provider, producer, partner, customer/user), scoping the AIMS, linking AI risk assessment with AI system impact assessment (Clause 6.1), applying Annex A controls and Annex B guidance, drafting the Statement of Applicability (SoA) and running management reviews. Participants leave with an AIMS Scope Statement, gap analysis and SoA blueprint.

Who Should Attend?

  • Quality, information security and compliance managers leading ISO/IEC 42001 implementation
  • AI governance committee members, AI CoE leads and CISO/CTO office teams
  • Enterprise risk, internal control and process management specialists
  • Technology and service providers facing client RFPs that require ISO/IEC 42001 alignment

Key Takeaways

  • Operationalise ISO/IEC 42001 Clauses 4–10 across the Plan-Do-Check-Act (PDCA) lifecycle
  • Define a realistic AIMS scope based on the organisation's AI roles and boundaries
  • Design the dual AI Risk Assessment and AI System Impact Assessment processes required by Clause 6
  • Evaluate all Annex A control domains to produce a defensible Statement of Applicability (SoA)
  • Build a phased implementation roadmap and mandatory documentation pack

Curriculum

ISO/IEC 42001 Architecture, Core Concepts and Organisational Roles
  • The Harmonized Structure (Clauses 4–10) and the roles of Annexes A, B, C and D
  • Mapping your role: AI Provider, AI Producer, AI Customer, AI Partner and AI Subject
  • Clauses 4 and 5: Context, interested parties, AIMS scope, leadership and AI policy
Clause 6 Planning: AI Risk Assessment and AI System Impact Assessment
  • Distinguishing organisational risk assessment from societal/individual impact assessment
  • Risk treatment plans, risk acceptance criteria and measurable AIMS objectives
Annex A Controls and Annex B Implementation Guidance (A.2–A.10)
  • A.2 Policies, A.3 Internal organisation, A.4 Resources (data, tooling, system, human)
  • A.5 Impact assessment, A.6 AI lifecycle, A.7 Data, A.8 Information for interested parties, A.9 Use of AI, A.10 Third-party relationships
  • Drafting the Statement of Applicability (SoA) and justifying control inclusions or exclusions
Clauses 7–10: Support, Operation, Performance Evaluation and Improvement
  • Competence, awareness, documented information and operational execution of controls
  • Monitoring metrics, internal audit, management review and corrective actions
Workshop: Gap Analysis and AIMS Rollout Roadmap
  • Benchmarking current governance practices against ISO/IEC 42001 clauses
  • Building a phased project plan toward Stage 1 and Stage 2 audit readiness

Other Courses in This Category

  • ISO/IEC 42001 Internal Auditor Training for AI Management Systems

    Plan, conduct and report internal audits of an ISO/IEC 42001 AI Management System (AIMS) aligned with ISO 19011, verify Clause 4–10 and Annex A evidence, and write clear nonconformity reports.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • AI Risk Management with the NIST AI RMF (Govern, Map, Measure, Manage)

    Operationalise the NIST AI Risk Management Framework (Govern, Map, Measure, Manage) and Playbook, implement TEVV (Testing, Evaluation, Verification and Validation) practices, and build a target AI risk profile.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • Integrating ISO/IEC 42001 (AIMS) with ISO/IEC 27001 (ISMS)

    Integrate ISO/IEC 42001 (AIMS) into an existing ISO/IEC 27001 ISMS without duplicating governance overhead: align Harmonized Structure clauses, unify risk registers and SoAs, and run combined audits.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • ISO/IEC 42005 AI System Impact Assessment and FRIA Practice

    Conduct structured AI System Impact Assessments under ISO/IEC 42005 and EU AI Act Article 27 (FRIA), evaluate harms to individuals and society, and produce auditable impact assessment reports.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • Governing Generative AI Risks with NIST AI RMF and NIST AI 600-1

    Apply the NIST AI 600-1 Generative AI Profile on top of the NIST AI RMF to govern the 12 core generative AI risks—including confabulation, data privacy, IP, cyberattacks and value-chain dependencies.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • Shadow AI Discovery, SaaS AI Controls and Safe Enablement

    Discover and govern Shadow AI—unapproved web LLMs, browser extensions and silently enabled AI features inside existing SaaS tools—using CASB/DLP controls, SaaS opt-out reviews and safe internal alternatives.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View

Get in touch