What does an AIMS include?

An ISO 42001-aligned artificial intelligence management system (AIMS) includes requirements that closely mirror those of other ISO management systems, such as an information security management system (ISMS) aligned with ISO 27001, or a quality management system (QMS) aligned with ISO 9001.  Clauses 4-10 of ISO 42001 are focused on setting out the requirements for ‘establishing, maintaining and continually improving an artificial intelligence management system (AIMS)’.  Given its alignment with other management system standards, an AIMS based on ISO 42001 is well-suited for integration into a broader management system.  This enables organisations to combine multiple management frameworks into a single, cohesive system that meets the requirements of various standards.

However, when compared to other standards, the requirements of ISO 42001 do contain some variation around:

• Context/objectives of the organisation
• Policy
• Roles and responsibilities
• Planning
• Risk assessment and risk treatment
• Performance evaluation and management review.  

ISO 42001 also uniquely requires organisations to conduct an AI impact assessment (AIIA), which is, by some margin, the most significant new conformance activity the Standard introduces.