ISO/IEC 42001

ISO/IEC 42001:2023 is the first certifiable management system standard for AI. In November 2024, AWS announced an accredited certification covering Amazon Bedrock, Amazon Q Business, Textract and Transcribe, issued by Schellman, a body accredited by ANAB. ISO/IEC 42001 applies to artificial intelligence the proven machinery of management systems (policy, roles, impact assessment, controls, internal audit, management review), modeled on the information security standard. What sets it apart from voluntary frameworks is certification by an accredited third party. The certificate is an enforceable document that contracting parties can exchange; a voluntary framework produces only a declaration. Its exact reach is worth pinning down. It attests that the organization has set up a management system and keeps it running. It does not say that its models are accurate, fair or safe, and marketing tends to blur that distinction. For an insurer the value is twofold and modest. The certificate gives an objective eligibility criterion when a policy is written. It also leaves a paper trail that lets the insured demonstrate its diligence at the time of a claim, which weighs heavily in liability litigation.