Standards
ISO/IEC 42001: a management system for AI
The world's first AI management system standard, and the evidence that grounds it.
What ISO/IEC 42001 is. Published in 2023, it is the world's first AI management system standard (AIMS) — it specifies requirements for establishing, implementing, maintaining, and continually improving how an organization governs AI. Crucially, it is a management-system standard: it works through the Plan-Do-Check-Act loop and governs policies and processes, rather than dictating the internals of any specific model. It is certifiable and applies to any organization that develops, provides, or uses AI.
Because it is about governance, ISO 42001 is only as strong as the evidence feeding it. Its risk-assessment and continual-improvement requirements need real inputs — not just documented intent.
How we use it. PharosOne supplies the technical evidence that grounds an AIMS. Our per-deployment testing and versioned methodology produce reproducible inputs for the Check stage — adversarial test results, control coverage, and named gaps — so the management system rests on measured reality, not policy alone. Those same findings are crosswalked to AIUC-1 controls, which operationalize ISO 42001's intent into something testable.
Read the standard at iso.org/standard/42001.
ISO 42001 governs the system; we supply the evidence its Check stage runs on.
Configurations like yours — generic results describe the population, not your specific agent.