Nalgo provides ISO 42001 implementation for organisations in the UK and Europe: we design, implement and embed an AI Management System aligned to ISO/IEC 42001, covering governance, AI risk, impact assessment, controls, responsibilities, evidence and continual improvement.
ISO 42001 is an operating management system.
It needs clear accountability, repeatable processes, risk and impact assessment, appropriate controls, competent people, documented evidence, management oversight and continual improvement.
We work with your organisation to put those elements in place and embed them into the way AI is actually governed and used.
The result is an AIMS that can operate beyond the certification audit.
Talk to usThe implementation covers the management-system requirements of ISO/IEC 42001 together with the controls that are relevant to your organisation, AI systems and risks.
Establish the structure, scope and accountability needed to operate the AI Management System.
Create repeatable processes for identifying, assessing, treating and accepting AI-related risk and assessing impacts on people and society.
Put the resources, competence, awareness, communication and documented information in place to support the AIMS.
Build appropriate governance around AI systems throughout their lifecycle and around the data used by those systems.
Implement the controls required by the organisation's risks and its relationships with suppliers, customers and other interested parties.
Establish the processes needed to measure the AIMS, review its effectiveness and improve it over time.
Each service supports a different stage of your ISO 42001 journey.
| Compare | Gap Analysis | Implementation | Internal Audit |
|---|---|---|---|
| Purpose | Understand where you are today | Build and implement your AIMS | Independently test your AIMS |
| Best for | Organisations starting their ISO 42001 journey | Organisations preparing for certification | Organisations with an AIMS already in place |
| What we do | Assess your current position against ISO 42001 | Help you design, document and operate the management system | Review conformity and test whether the system is working effectively |
| Main deliverable | Gap report and prioritised roadmap | Operational ISO 42001 AI Management System | Formal internal audit report and findings |
| Typical timing | Before implementation | After the initial assessment | Before certification and at planned intervals afterwards |
| Outcome | Know what needs to change | Become ready for certification | Demonstrate conformity and identify improvements |
| Explore each service | Explore Gap Analysis | Explore Internal Audit |
ISO 42001 includes a reference set of AI-specific controls.
As part of implementation, we determine which controls are required based on your risks and obligations, document those decisions in the Statement of Applicability and help put the applicable controls into operation.
Not every Annex A control will necessarily apply. Control selection is based on your AI risks, objectives, context and applicable requirements.
ISO 42001 should fit the organisation rather than sit beside it.
Where appropriate, we build on governance and management processes that already exist instead of recreating them.
Existing approaches to information security, privacy, quality, risk, procurement, product development and compliance can often form part of the AIMS when they meet the relevant requirements.
Understand the organisation, define the AIMS scope, governance model and implementation approach.
Design the risk, impact, governance, control and management-system processes required.
Put the policies, processes, controls, registers and responsibilities into operation.
Work with the relevant teams so the AIMS becomes part of normal organisational activity.
Establish the records and evidence that demonstrate the management system is operating.
Ensure the AIMS is operating effectively and ready to move into independent internal audit and certification preparation.
Delivered by certified ISO 42001 Lead Implementers.
The engagement leaves your organisation with the governance, processes, controls, documentation and operating evidence needed to manage AI through an ISO 42001-aligned AIMS and progress towards independent certification.
You want to establish an ISO 42001 AI Management System and need structured implementation support.
You already govern AI in parts of the organisation but need to bring those activities together into a formal AIMS.
You already operate standards such as ISO 27001 or ISO 9001 and want to integrate AI management with existing processes where appropriate.
You intend to pursue independent ISO 42001 certification and need to build and operate the management system first.
We can help you establish and implement the governance, processes, controls and evidence needed to operate an effective AIMS and prepare for independent certification.
