A certifiable management system standard for artificial intelligence, bearing on the organization rather than on the quality of any model.
ISO/IEC 42001 applies to artificial intelligence the proven machinery of management systems, comprising policy, roles, impact assessment, controls, internal audit and management review, on the model of the information security standard. Its decisive difference from voluntary frameworks is certification by an accredited third party, which produces an enforceable document that contracting parties can exchange, where a voluntary framework produces only a declaration. Its exact reach must be understood to avoid mistaking it: it attests that the organization has established and maintains an arrangement, not that its models are accurate, fair or safe, a distinction marketing tends to erase. For an insurer the value is twofold and modest, since the certificate provides an objective eligibility criterion at the entry of a policy, and it creates a documentary trail making the insured's diligence demonstrable at the time of a claim, which weighs heavily in liability litigation.
The International Organization for Standardization published ISO/IEC 42001 in December 2023, the first certifiable standard devoted to artificial intelligence management systems.
ISO 42001, système de management de l'IA, AI management system