ISO/IEC 42001 is the newest standard in the collection of normative publications from ISO (International Organization for Standardization) and IEC (International Electrotechnical Commission), published in December 2023.
With the advancement of the use of Artificial Intelligence (AI) in multiple scenarios, including corporate ones, there was a need to standardize this demand.
Furthermore, it appears that the use of this type of technology is increasingly associated with activities that involve decision-making, data analysis, use of logic and learning, which means that behavior can change throughout use.
Below, we will explain the key points of the standard.
What is the purpose of ISO/IEC 42001?
This is a standard that was developed to guide organizations in the responsible use of Artificial Intelligence (AI) systems, with the implementation of an AI management system.
It establishes minimum standards of security, ethics for the use of data and project requirements for the appropriate use of this technology that has been gaining increasingly more space and boosting different types of markets.
What is the target segment of this standard?
ISO/IEC 42001 is aimed at all organizations, regardless of size and sector, that use or provide – to any degree – technologies based on artificial intelligence.
Benefits that can be achieved with ISO 42001
With the implementation, management, and continuous improvement of an artificial intelligence management system, it is possible to establish international compliance focused on:
- Ethical principles;
- Reliability and security for the company, customers, and stakeholders;
- Risk management and reduction;
- Data traceability and information transparency;
- Responsible use of AIs;
- Innovation;
- Continuous improvement.
In short, this standardization addresses broad aspects of this topic, providing reliability, security, compliance with legislation, and risk mitigation. In addition to all the problems that can be avoided with this compliance, it demonstrates the degree of business commitment to all the implications that this technology can bring.
It is important to mention that this standard can be associated with several others applicable to each type of business, processes, and control, and can be evaluated individually with effective risk management, changing the implementation model and respective certification costs on a case-by-case basis.
Looking for information security?
Also read: ISO 27001: complete implementation guide in 10 steps
