ISO 42006 and its impacts on ISO 42001 Certification

Since it was published in late 2023 ISO 42001:2023, the standard for Artificial Intelligence Management Systems, has been much discussed, studied and promoted.

However, one of the key factors holding the market back is the current (as of July 2024) lack of accredited ISO 42001 Certification, which in turn has led to a delay in supply chains utilising the standard in their tenders and due diligence.

However the key to resolving this problem, ISO 42006, is close to publication and (as of July 2024) is in Draft International Standard stage (DIS).

What is ISO 42006?

ISO 42006 is titled “Information technology — Artificial intelligence — Requirements for bodies providing audit and certification of artificial intelligence management systems”.

It sets out the requirements for how certification bodies (and others) should audit and certify the ISO 42001 standard. 

This is a vital document to ensure the consistency and integrity of ISO 42001 Certification.

It includes competence requirements for auditors and audit time requirements, enabling bodies to calculate how many days initial and on-going audits should take in relation to the scope.

This is not unique to ISO 42001.  A similar standard, ISO 27006, exists for Information Security Management Systems to ISO 27001, which was recently updated.  Read more: ISO 27006:2024 – What’s New? – Certification Bodies

Whereas ISO 9001, ISO 14001, ISO 45001 and other standards use a document produced by the IAF called MD5.  Read more: How Are ISO Certification Audit Days Calculated?  

When Will Accredited ISO 42001 Certification be available?

Until ISO 42006 is fully published and confirmed, there is an understandable reluctance to set any accreditation and certification scheme in stone.  

However, in January 2024 the UK accreditation body, UKAS, announced an ISO 42001 Certification pilot scheme which we understand received a lot of interest from certification bodies.

While the American accreditation body, ANAB, appears to be closed to issuing accreditation to certification bodies, perhaps by the end of 2024.

Once accreditation is available, certification bodies will have to ensure they can meet the requirements, including providing competent auditors, before they can receive accreditation, which may take additional time.

UPDATE: In a LinkedIn post on 26th July 2024, UKAS stated that they “plan to start the assessments this autumn [2024]”

Unaccredited ISO 42001 Certification

Also accredited certification is considered by many to be essential to ensure the quality of your certificate many certification bodies, including those accredited for other standards, are currently (as of July 2024) offering ISO 42001 and unaccredited certificates.

While these certificates may not carry the same weight as “accredited certificates”, there may still be some benefits to choosing the route.

Firstly it shows a commitment to ethical AI practices early in the life cycle of this standard. 

If you choose the right provider, it also shows that you have undergone an impartial third-party audit of your AI management system, which can provide assurance to your customers the risk and impacts are managed.   

When choosing an unaccredited certificate, it’s important to find a trustworthy certification body.  Our Certification management Services team regularly engages with many bodies and can offer free impartial advice for selecting the right ISO 42001 Certification Body for you, please contact us!