ISO/IEC 42001:2023
ISO/IEC 42001Artificial Intelligence Management System (AIMS) in the UAE & Saudi Arabia
The first certifiable management system standard for AI — governance, risk and impact assessment, and lifecycle controls for organisations that build or use AI systems.
Certifiable by an accredited certification body
Typically needed by
- ✓Organisations deploying AI in customer-facing or decision-making processes
- ✓AI vendors asked by clients to demonstrate responsible-AI governance
- ✓Risk, compliance and internal audit teams who need to audit AI use
Scope your ISO/IEC 42001 project
We’ll get back to you about the next step.
Saudi Arabia
Complements SDAIA’s AI ethics principles and the broader national data and AI agenda, giving a structured, auditable way to show responsible AI use.
United Arab Emirates
Fits the UAE’s national AI strategy agenda and the growing number of government and enterprise buyers asking vendors how their AI is governed.
What the engagement looks like
- 01
Gap assessment and scope definition
- 02
Policies, processes and documented information
- 03
Implementation support and awareness training
- 04
Internal audit and management review
- 05
Certification audit preparation with your chosen accredited certification body
Timelines depend on size, sites and existing documentation — you get a realistic plan after scoping, not a one-size promise.
ISO/IEC 42001 training
ISO/IEC 42001 questions
Who issues the ISO/IEC 42001 certificate?+
An independent certification body accredited for ISO/IEC 42001. Preparation, training and advisory are deliberately kept separate from certification so the audit stays impartial.
Can our team be trained on ISO/IEC 42001?+
Yes — options include ISO 42001 Lead Auditor, AI for Business Leaders, Generative AI for Digital Transformation. Public, virtual and in-house formats can be arranged; ask for current dates and fees.
Do we need ISO 42001 if we only use third-party AI tools?+
Many organisations start by governing the AI they consume rather than build. The standard scales to that scope — an initial readiness review clarifies what is in and out.
Next step
Start with a ISO/IEC 42001 readiness review
Seven questions, two minutes — see where you stand before the first call.