Understanding ISO 42001 (A-LIGN)
An explainer from A-LIGN, an ISO-accreditation/audit firm, on the structure and scope of ISO/IEC 42001, the AI management-system standard. Used here for the standard’s annex structure and its stated relationship to the EU AI Act.
What it establishes
- ISO 42001 is described as “the world’s first AI management system standard.”
- It is organized like other ISO management-system standards around six core requirement areas: leadership, planning, support, operation, performance evaluation, and continual improvement (the Plan-Do-Check-Act backbone shared with ISO 9001/27001).
- Its annexes carry the AI-specific content:
- Annex A — a management guide for AI system development, including a list of controls;
- Annex B — implementation guidance for those controls;
- Annex C — AI-related organizational objectives and risk sources;
- Annex D — domain- and sector-specific standards.
- On the EU AI Act: ISO 42001 “provides the foundation you’ll need” toward Act compliance, but the piece is explicit that it is not (yet) an approved harmonized standard for AI Act conformity — the QMS conformity standard is still pending.
Reading
- Tier T2 — a competent vendor explainer (audit firm with commercial interest in certification), not the primary ISO text (iso.org returns 403/paywalled). Treat the structural facts as reliable; weight the “you’ll need this for the Act” framing as sales-adjacent.
Connections
- explains: iso-iec-42001
- positions against: eu-ai-act