Neil is a Senior Consultant at URM, with over 20 years of ‘real world’ information security knowledge and experience, having worked in complex telecommunications, (multinational) financial services and professional services environments, with both regional and global responsibilities. Neil has considerable experience encompassing internal audit and a wide range of technical platforms, security standards, SOX, and risk and control supported by a strong background in compliance, development and consultancy. With URM, Neil has worked closely with a global organisation to review and align its control framework, establishing an effective auditing and testing regime and transition to ISO 27001:2022. He has also worked with a variety of clients to establish their conformance to ISO 27001, conducting ISO 27001 internal audits, and providing consultancy advice and guidance on achieving an effective governance approach.
ISO 42001 and AI Perspectives
In this episode of InfoSec Insider, Neil Jones, Senior Consultant at URM, breaks down the purpose and structure of the recently released ISO 42001, the International Standard for Artificial Intelligence Management Systems (AIMS), as well as explaining the Standard’s use of AI ‘perspectives’. Neil leverages his 20+ years’ working with a range of risk and information security-related standards to discuss:
- What ISO 42001 is intended for, and what it is not
- How ISO 42001 is structured, and how it compares to other standards written in the ‘Harmonised Structure’
- What an AIMS is
- How you can establish the ‘trustworthiness’ of an AI system and how this concept is articulated through ‘AI perspectives’ in ISO 42001.