Course Description
ISO/IEC 42001:2023 is the world's first international standard for an Artificial Intelligence Management System — and critically, it is a Type-A standard, meaning organisations can be certified against it by third parties. That makes it the mechanism by which a company proves to customers, regulators and procurement teams that it governs AI responsibly.
Most organisations are at the build stage, which makes Lead Implementer the larger market: the people buying it are GRC managers, AI governance leads and CISOs who have had AI added to their remit.
This course develops the capability to implement an AIMS. Participants learn the standard's structure and its Plan-Do-Check-Act logic, context and leadership requirements, AI risk assessment and impact assessment, the Annex A controls, integration with ISO 27001, gap analysis, internal audit preparation and the route to certification.
What you will achieve
By the end of this training course, participants will be able to:
- Explain ISO/IEC 42001 and the AI Management System concept
- Apply the standard's structure and PDCA logic
- Establish context, scope, leadership and policy
- Conduct AI risk assessment and AI system impact assessment
- Select and implement Annex A controls
- Integrate the AIMS with ISO 27001 and existing systems
- Conduct gap analysis and build an implementation plan
- Prepare the organisation for certification audit
How the course is delivered
The course combines the standard clause by clause with practical implementation exercises — scoping, risk assessment, control selection and gap analysis — on realistic organisational scenarios.
The programme reflects that ISO 42001 shares its high-level structure with ISO 27001, and shows how to extend an existing management system rather than build a parallel one.
Designed for
This training course is ideal for:
- AI governance and GRC managers
- CISOs adding AI to their remit
- Compliance, risk and privacy professionals
- Consultants advising on AI management systems
- Anyone implementing ISO/IEC 42001
Daily programme
- ISO/IEC 42001 and why it exists
- Management system standards and Type-A certification
- Structure, PDCA and the high-level structure
- Relationship to ISO 27001, EU AI Act and NIST AI RMF
- Context of the organisation and scope
- Leadership, policy and roles
- AI risk assessment
- AI system impact assessment
- The Annex A control set
- Policies and organisational controls
- AI lifecycle controls
- Data and third-party controls
- Operational planning and control
- Documented information
- Integration with ISO 27001 and other systems
- Gap analysis in practice
- Monitoring, measurement and evaluation
- Internal audit and management review
- The certification process
- Implementation planning workshop
Certification & accreditation
BII Certificate of Completion
BII Certificate of Completion Upon successful completion, participants receive a BII Development Institute Certificate of Completion with a unique reference code that is independently verifiable. Our certificates are recognised internationally and reflect successful completion of your chosen programme.
