Cyber Cultura course
ISO 42001: AI Management System
Implementing and operating an AIMS, clause by clause.
Prepares participants to implement, operate, maintain and continually improve an AI Management System (AIMS) according to ISO/IEC 42001, integrating governance, risk, compliance, security, privacy and ethics throughout the lifecycle of AI systems.
- Workload
- 8 hours
- Format
- Online or in-company
- Investment
- On request
We’ll reply with dates, format and investment.
Who it’s for
- Those responsible for AI governance, risk and compliance.
- Data, AI and product teams that need to operate within a management system.
- Security and privacy professionals who will integrate the AIMS with the ISMS and the PIMS.
What you’ll develop
- Understand the High-Level Structure (Annex SL) and how 42001 applies it to the AI context.
- Establish the policy, roles, responsibilities, competencies and resources for the AIMS.
- Map the context, interested parties, legal, regulatory and contractual requirements, and AI objectives.
- Plan and operate the AI lifecycle processes: data, model, deployment, monitoring, incidents and changes.
- Integrate AI risk management, aligned with ISO/IEC 23894 and ISO 31000, and the organizational and technical controls.
- Measure performance, carry out internal audits and drive the continual improvement of the AIMS.
Syllabus
8 hours
01Introduction to the AIMS and the standards framework
- How 42001 is positioned against ISO 31000, ISO/IEC 23894, 27001, 27701 and NIST AI RMF
- Terminology and scope
02Clause 4: Context of the organization
- Understanding the organization and its context for AI
- Internal and external interested parties and their requirements
- Scope of the AIMS: boundaries and applicability
03Clause 5: Leadership
- Management commitment, AI policy, roles and responsibilities
- AI governance and strategic alignment
04Clause 6: Planning
- AIMS risks and opportunities
- AI objectives and plans to achieve them
- Integration with AI risk management (ISO/IEC 23894)
05Clause 7: Support
- Resources, competence, awareness and communication
- Documented information: policies, standards, playbooks and records
06Clause 8: Operation and the AI lifecycle
- Data management: provenance, quality, labeling, bias, privacy and retention
- Model development and validation: design, experiments, reproducibility, robustness and interpretability
- Deployment and MLOps: versioning, CI/CD, security and environment segregation
- Transparency, human oversight and security controls
- Third-party management: providers, foundation models, APIs and services
- Change management and AI incident management
07Clause 9: Performance evaluation
- Monitoring, metrics and KPIs for trustworthy AI
- AIMS internal audit and management review
08Clause 10: Improvement
- Nonconformities, corrective actions and continual improvement of the AIMS
09Integrations and mappings
- Practical alignment with 23894 (AI risk), 27001 and 27701 (security and privacy) and NIST AI RMF (Govern, Map, Measure and Manage)
- Artifact templates: AI Policy, AI system inventory, data and model register, monitoring plan and AI incident response plan
What the course includes
- AIMS artifact templates
For your team
This course is also offered in-company, on-site or remote, as a private class for your company.
Cyber Cultura course
ISO 42001: AI Management System
We’ll reply with dates, format and investment.
cyber@cyberconsulting.com.br