Skip to content
Afflatus Consulting GroupAfflatus Consulting Group

Course sheet · 2027 catalogueManagement system standardsNew in 2027

ISO/IEC 42001:2023 — AI Systems

Two days to understand the requirements of ISO/IEC 42001:2023 and prepare an artificial intelligence management system, whether your company develops, integrates or uses AI systems. Policy, roles, risk assessment, impact assessment, life cycle, data, suppliers, Annex A controls: the standard is applied to your own AI uses, listed during the session.

Duration2 days

Request a quote

Objectives

  1. Explain the structure of ISO/IEC 42001:2023 and how it fits with other management system standards
  2. List the company’s AI systems and define the organisation’s role for each
  3. Assess AI-related risks and the impact of the systems on the people concerned
  4. Choose the suitable Annex A controls and formalise them in a statement of applicability
  5. Organise human oversight, supplier control, internal audit and management review

Programme

Day 1 — morning

  • Why an AI management standard: expectations of customers, principals and foreign regulations
  • ISO/IEC 42001:2023, first edition published in December 2023: harmonised structure and annexes
  • Context: role of the organisation (provider, developer or user of AI systems), interested parties
  • Inventory of AI systems and scope of the system

Day 1 — afternoon

  • Leadership and AI policy: objectives, authorised uses, roles
  • Assessment and treatment of AI-related risks
  • Assessment of the impact of AI systems on the people and groups concerned
  • Exercise: inventory and classification of your company’s AI uses

Day 2 — morning

  • Annex A controls: policies, resources, life cycle, data, information for interested parties, responsible use, relations with third parties
  • Statement of applicability and useful documentation
  • Life cycle of an AI system: design, verification, deployment, monitoring, retirement
  • Data: provenance, quality, personal data protection under Law No. 09-08

Day 2 — afternoon (workshop)

  • Human oversight, management of incidents and performance drift
  • Monitoring, internal audit, management review and integration with ISO/IEC 27001:2022 or ISO 9001:2026
  • Workshop: impact assessment of an AI use in your company and first measures
  • Knowledge test and presentation of the work

Teaching methods

  • Guided reading of the requirements and of the Annex A controls
  • Real inventory of your company’s AI tools and uses, including undeclared ones
  • Case study: a generative AI tool used by purchasing or HR
  • Impact assessment grid handed to participants and applied in the workshop
  • Mid-course quiz and final test

Assessment and documents

Mid-course quiz and knowledge test at the end of the session, post-course evaluation at D+1. Numbered training certificate, verifiable online, for each participant; training report, inventory of AI uses and the impact assessment produced in the workshop handed to the company.

Bilingual materials for every participant; each classroom course comes with its digital twin on OmniLearn.

Frequently asked questions

Does the standard concern a company that only uses off-the-shelf AI tools?

Yes. ISO/IEC 42001:2023 is aimed at organisations that develop, provide or use AI systems. For a user, the work mainly concerns the inventory of uses, risks, data entrusted to tools and supplier control.

Do we need an ISO/IEC 27001 system beforehand?

No. The two standards share the harmonised structure and combine well, but ISO/IEC 42001:2023 can be implemented on its own. An existing information security system makes document control, internal audit and supplier control easier.

Does the standard mean compliance with AI regulations?

No. It provides a management framework that helps demonstrate control of AI uses. Each regulation, such as the European AI regulation for companies exporting to the Union, must be analysed on its own.

How does it differ from the course “AI Usage Charter and Governance”?

The policy course, in one day, sets the rules of use for employees. This course builds a complete management system, with risks, impact assessment, controls, audit and management review, and prepares for possible certification.

Practical information

Duration
2 days
Audience
Management, IT managers, compliance, risk and quality managers, AI project managers, business managers who use AI
Prerequisites
No prerequisites; knowledge of a management system standard is useful
Group size
Groups of 6 to 12 participants, in-company
Format
In-company, face to face on your site
Language
French, Darija or English; bilingual materials
Funding
OFPPT special training contracts (TFP), GIAC, Maroc PME: we prepare the applications with you, at no extra cost.
Programme customisation
Programme adapted to your procedures, your equipment and your audience

Organise this course

Price and dates on quote, depending on your headcount, your site and your preferred period.

Request a quoteDownload the PDF sheetCall +212 661 863 618

Going further

Our consultants can also support the project on your site. AI and Digital Transformation for Companies in Morocco and Africa

Related courses

All courses in this field

Train your teams on your own site

Book a call with a consultant or request an in-company session: we adapt the programme to your procedures and your audience.

Or call us on ⁦+212 661 863 618⁩

contact@afflatusconsulting.com