ISO/IEC 42001: Which ISO/IEC standard fits, and how does it differ from its companions?
ISO/IEC 42001 is the certifiable AI management-system standard, while 22989 provides terminology and 42005 covers AI impact assessment.
The question
An organization wants a certifiable management-system standard to govern its AI activities across the whole organization, not merely a vocabulary or an impact-assessment method. Which ISO/IEC standard fits, and how does it differ from its companions?
Preparing for AIGP? Take the free 5-min readiness quiz →
- ISO/IEC 22989, the certifiable management-system standard, whereas 42001 only provides foundational vocabulary and 42005 defines the four core AI risk-treatment functions.Plausible but mismatched: 22989 is the concepts-and-terminology standard, not the certifiable management system, and 42005 is impact-assessment guidance rather than risk functions.
- ISO/IEC 42001, the certifiable AI management-system standard, whereas 22989 supplies concepts and terminology and 42005 gives guidance on AI system impact assessment. ✓Correct: 42001 is the certifiable AI management system (AIMS), 22989 is vocabulary, and 42005 addresses AI system impact assessment.
- ISO/IEC 42005, the certifiable AI management-system standard, whereas 42001 covers only impact assessment and 22989 is a voluntary risk-tier classification schema.Almost plausible but reversed: 42001 is the certifiable AIMS while 42005 is impact-assessment guidance, and 22989 is terminology, not a risk-tier schema.
- ISO/IEC 42001, but it is merely a non-certifiable terminology reference, while 22989 is the auditable management system and 42005 lists mandatory penalty tiers for noncompliance.Plausible-sounding but wrong: 42001 is certifiable, not a terminology reference, and ISO standards do not set penalty tiers, which belong to law.
The trap
Mixing up which ISO number is the certifiable management system versus the vocabulary standard. How to remember it
ISO/IEC 42001 is the certifiable AI management-system standard, while 22989 provides terminology and 42005 covers AI impact assessment.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- MAP, because the function establishes context and frames: Which core function are these activities most →
- Purpose limitation and transparency: Under existing data-protection principles, which concern is most directly →
- Data minimization and privacy by design: Which data-protection concept does this approach most directly →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.
