Knowledge Hub · Security

What is ISO/IEC 42001, and does it apply to businesses that use AI?

Secure AI with Cloudflare · Answered by FirstNet Technology Services

Short answer

ISO/IEC 42001:2023 is the first international standard for AI management systems. It applies to organisations that develop, provide or use AI.

In detail: ISO/IEC 42001 AI Management Explained

Like ISO/IEC 27001 for information security, it sets out how to run AI responsibly: assessing AI risk, setting objectives, monitoring AI systems and governing the data they use.

Areas the standard covers include:

  • AI risk assessment, for example uncontrolled data access, leaks of personal information and prompt injection.
  • AI system impact assessment.
  • Monitoring and measurement, with evidence available for audit.
  • Responsible use of AI and data governance for AI.

FirstNet's Secure AI with Cloudflare controls help align with ISO/IEC 42001 by producing the access rules, logs and evidence these areas call for. They support compliance; they do not certify it, and the outcome depends on your own policies and how the controls are run.

Source: FirstNet Secure AI with Cloudflare service page →

Call