Weise Logik
ISO/IEC 42001 / AI Management System

Build governance around the AI you actually use.

Build an Artificial Intelligence Management System from scope and governance through controls, evidence, internal review and certification readiness.

Discuss your projectExplore the work
01 /ISO/IEC 42001 / AIMS

An AI management system that can be demonstrated in operation.

ISO/IEC 42001 sets requirements for establishing, implementing, maintaining and improving an AI Management System (AIMS). This page covers scope, risk and impact assessment, controls, internal audit and management review.

01AIMS scope and context02Risk and impact assessment03Controls and evidence04Internal audit and management review
02 /THE WORK

Designing and operating the AIMS.

01

Scope & context

Define the AIMS boundary, interested parties, AI use and the existing management environment.

  • AIMS scope
  • AI inventory
  • Context and interested parties
02

Leadership & risk

Set policy, responsibilities, risk methods and impact assessment processes around organisational objectives.

  • AI policy
  • Roles and RACI
  • AI risk methodology
03

Controls & operation

Implement controls, supplier requirements, literacy, monitoring and incident processes with accountable owners.

  • Control environment
  • Supplier controls
  • AI literacy
04

Assurance & improvement

Organise evidence, test operation and prepare management review and internal audit without confusing advisory work with certification.

  • Evidence register
  • Internal audit support
  • Management review support
03 /ENGAGEMENT LEVELS

A workstream matched to the current state.

01

AI / ISO 42001 Readiness Scan

Create the first reliable view of AI use, management-system maturity and priorities.

02

ISO 42001 Readiness Programme

Prepare governance, controls and evidence for an eventual independent external assessment.

03

ISO 42001 Management System Implementation

Establish an Artificial Intelligence Management System and put its governance processes into operation.

04

Ongoing AI Governance Support

Maintain and improve the AIMS as AI use, suppliers and obligations change.

04 /REVIEWABLE OUTPUTS

Outputs tied to the agreed scope.

Internal audit and management review test evidence from the operating system. Formal certification is performed independently and does not automatically establish EU AI Act compliance.

  1. 01AI inventory
  2. 02AI governance model and RACI
  3. 03AI policy
  4. 04Risk and impact assessment methods
  5. 05Control map and supplier controls
  6. 06AI literacy plan
  7. 07Monitoring and incident process
  8. 08Evidence register and mock audit report
NEXT STEP

Define the right first engagement.

The first discussion defines the objective, scope and expected outputs.

Discuss the work