ISO 42001, implemented properly.
We take you from gap analysis through a working AI Management System to certification-readiness against ISO/IEC 42001, the international standard for managing AI.
A certifiable AI Management System, built with you
ISO 42001 is the AI equivalent of ISO 27001: a certifiable standard for governing AI responsibly, and increasingly a procurement requirement. We do not hand you a template and leave. We build the working system with you, so it is genuinely yours to run afterwards, and get you ready for the audit if you want the certificate. Want the detail first? Read our ISO 42001 implementation guide.
Why implement an AI management system?
Know where AI is, and keep it under control
Build a clear picture of how AI is being used across your organisation, who is accountable for it and where the greatest risks sit.
Be ready to demonstrate responsible AI
Turn AI governance from a collection of informal policies into documented, auditable evidence.
Build trust and scale AI with confidence
Give customers, partners and senior leadership greater confidence that AI is being managed responsibly.
Gap analysis, implementation, certification-readiness
A fixed-scope path to a working AI Management System, proportionate to your size and led by a certified Lead Implementer.
Gap analysis
We assess where you stand against ISO 42001, what you already have, what is missing, and how much of an existing system (like ISO 27001) can be reused. You get a clear picture and a prioritised plan before any build begins.
Implementation
We build the AI Management System with you: the AI policy, the register, risk and impact assessment, the Annex A controls and Statement of Applicability, human oversight, and the standing evidence trail. Proportionate to your risk, not the heaviest possible version.
Certification-readiness
We run the internal audit and management review, close the findings, and prepare you for the certification body’s stage 1 and stage 2 audits, so you go in confident. Certification is optional; we get you ready for it either way.
The pieces of a real management system
Everything ISO 42001 asks for, built with you and yours to run afterwards, not a binder that gathers dust.
Gap analysis & scope
Where you stand against the standard, and the boundary of your management system.
AI policy & roles
The top-level policy and clear accountability the standard requires.
AI system register
A maintained inventory of every AI system, model and tool in scope.
Risk & impact assessment
Risk classification, AI impact assessment, and the Statement of Applicability.
Controls & human oversight
The Annex A controls that apply, human oversight and monitoring in operation.
Internal audit & review
The check step that keeps the system alive and satisfies an external auditor.
Pricing guide
Pricing is subject to multiple factors, please contact us for details.
Foundation
Smaller firms, lighter AI use
Growth
Mid-market, multiple AI systems
Enterprise
Embedded ownership, board-facing, fractional lead
See where you stand first
A free, self-serve check that reads your maturity against ISO 42001 and shows the gaps to close, before you commit to anything.
ISO 42001 consulting: common questions
What does an ISO 42001 consultant do? +
An ISO 42001 consultant helps you build and run an AI Management System that meets the standard, and prepares you for certification. In practice that means a gap analysis against ISO 42001, then implementing what is missing (policy, register, risk and impact assessment, controls, oversight, evidence), then getting you audit-ready. We work as a Lead Implementer alongside an internal owner, so the system is genuinely yours to run afterwards.
Do we need a consultant to implement ISO 42001? +
No, you can implement ISO 42001 yourself using the standard as the blueprint. A consultant is worth it when you want it done faster, done right the first time, or done to a certifiable standard without a costly learning curve, especially if a customer or regulator is waiting. We often work alongside an internal owner rather than replacing them.
How long does ISO 42001 implementation take? +
For most small and mid-sized organisations, a proportionate AI Management System takes a few weeks to a few months to stand up, then runs continuously, with certification adding an audit cycle on top. Reusing an existing ISO 27001 system speeds it up considerably. Our implementation guide covers the timeline in more detail.
How much does ISO 42001 consulting cost? +
There is no fixed price; it depends on the amount of AI in scope, how much governance already exists, and whether you certify. We scope and quote each engagement up front, so you see the number before you commit, and we design the smallest system that genuinely meets the standard rather than the heaviest.
Can you reuse our existing ISO 27001 system? +
Yes, and we will. ISO 42001 shares the same structure as ISO 27001 and ISO 9001, so the leadership, risk, documentation, internal audit and management-review machinery largely carries over and gets extended to cover AI. If you already run one of those standards, implementation is meaningfully faster.
Ready to implement ISO 42001?
Tell us where you are and we will scope it, from gap analysis to certification-readiness. Fixed price before you start.