Course sheet · 2027 catalogueDigital and artificial intelligenceNew in 2027
ISO/IEC 42001:2023 — AI Management Systems
Two days to understand and apply ISO/IEC 42001:2023, the standard for an artificial intelligence management system. Built on the same structure as ISO 9001:2026 and ISO/IEC 27001:2022, it covers AI policy, the assessment of risks and impacts of AI systems and control of their life cycle. Exercises focus on the AI systems your company uses or develops.
Duration2 days
Request a quoteObjectives
- Explain the structure of ISO/IEC 42001:2023 and how it fits with other management system standards
- Define the context, the scope and the organisation’s role regarding its AI systems
- Carry out an AI risk assessment and an impact assessment of AI systems on people
- Select and justify the Annex A controls in a statement of applicability
- Prepare monitoring, internal audit and management review of the AI management system
Programme
Day 1 — morning
- Why an AI management standard: expectations of customers, principals and authorities
- Harmonised structure: what is shared with ISO 9001:2026, ISO 14001:2026 and ISO/IEC 27001:2022
- Context, interested parties, the organisation’s role (AI provider, developer or user), scope
- Leadership, AI policy, roles and responsibilities
Day 1 — afternoon
- Inventory of the organisation’s AI systems: purchased tools, assistants, models developed, agents
- AI risk assessment: bias, errors, security, data, dependence on a supplier
- Impact assessment of AI systems on individuals, groups and society
- Exercise: risks and impacts of one AI system in your company
Day 2 — morning
- Annex A controls: policies, internal organisation, resources, life cycle, data, information for interested parties, use, third-party relationships
- Statement of applicability: include, exclude, justify
- Life cycle of an AI system: design, verification, deployment, monitoring, retirement
- Suppliers and customers: contractual requirements and information to provide
Day 2 — afternoon (workshop)
- Monitoring, measurement, internal audit and management review of the AI management system
- Pointers on the EU AI Act for companies that serve European customers
- Workshop: gap analysis of your organisation and first priorities
- Knowledge test and presentation of the gaps to management
Teaching methods
- Annotated reading of the standard’s requirements and the Annex A controls
- Exercises on the AI systems actually used in your company
- Guided construction of a statement of applicability
- Comparison with an existing ISO 9001 or ISO/IEC 27001 system to reuse what is already in place
- Mid-course quiz and final test
Assessment and documents
Mid-course quiz and knowledge test at the end of the session, end-of-course survey the next day. Numbered training certificate, verifiable online, for each participant; training report and the workshop gap analysis handed to the company.
Bilingual materials for every participant; each classroom course comes with its digital twin on OmniLearn.
Frequently asked questions
Can ISO/IEC 42001:2023 be certified?
Yes. It is a requirements standard: an organisation can have its AI management system certified by a certification body. The course prepares you to build that system; it does not award certification.
Do we need to develop AI to be concerned?
No. The standard also applies to organisations that buy or use AI systems, for example assistants, agents or analysis tools built into their software. The organisation’s role determines the relevant controls.
How does it relate to ISO/IEC 27001:2022?
Both standards share the harmonised structure and a statement-of-applicability logic. Information security remains covered by ISO/IEC 27001; ISO/IEC 42001 adds what is specific to AI: impacts on people, training data, life cycle, responsible use.
Is the standard enough to comply with the EU AI Act?
Not automatically. A system that conforms to ISO/IEC 42001 structures much of the expected work, but the Act’s obligations depend on the risk level of each system and must be checked one by one.
Practical information
- Duration
- 2 days
- Audience
- Management, IT, compliance, risk and quality managers, AI project managers, internal auditors
- Prerequisites
- Knowledge of a management system standard is useful, not mandatory
- Group size
- Groups of 6 to 12 participants, in-company
- Format
- In-company, face to face on your site
- Language
- French, Darija or English; bilingual materials
- Funding
- OFPPT special training contracts (TFP), GIAC, Maroc PME: we prepare the applications with you, at no extra cost.
- Programme customisation
- Programme adapted to your procedures, your equipment and your audience
Organise this course
Price and dates on quote, depending on your headcount, your site and your preferred period.
Request a quoteDownload the PDF sheetCall +212 661 863 618Going further
Our consultants can also support the project on your site. AI and Digital Transformation for Companies in Morocco and Africa
Related courses
All courses in this fieldTrain your teams on your own site
Book a call with a consultant or request an in-company session: we adapt the programme to your procedures and your audience.