Glossary · Technology
ISO/IEC 42001
The international standard, published in 2023, specifying requirements for an artificial intelligence management system within an organisation.
- Field
- Technology
- Examined in
- CBA-AIG
- Learning objectives
- 1
Where the CBA Standards examine it
In the specimen paper
A Polish logistics firm receives a supplier's ISO/IEC 42001 certificate whose scope reads "development and operation of AI systems supporting warehouse robotics at the Gdansk site". The product being bought is the supplier's route pricing model. What does the certificate support?
Answer
Nothing about the route pricing model, which sits outside the declared scope.
Why that is the answer
A certificate is a statement that an accredited body found an organisation's AI management system conforming to the standard within a scope the organisation wrote for itself. That makes the scope statement, and the statement of applicability behind it, far more informative than the certificate front page, and both are where narrowing happens quietly. Here the scope names warehouse robotics at one site, so it says nothing whatever about a route pricing model sold from elsewhere in the business. The practical move is to stop treating the certificate as an answer and ask for what you originally wanted: validation evidence, test results on populations like yours, and notice of material model change.
Related terms
- NIST AI Risk Management FrameworkTechnology
A voluntary framework published by the US National Institute of Standards and Technology in 2023 to help organisations identify, assess and manage the risks of AI systems.