ISO 42001 / ISO 42005

AI-management & governance

AI offers great opportunities but also brings real risks. Anyone who develops, implements, or uses AI should do so in a controlled manner, with attention to effectiveness, transparency, and fairness. In practice, I often see organizations applying AI without insight into risks, responsibilities, and impact. Then there is a gap between technology and good management. That is exactly where I come in.

How can I help?

I help organizations set up, control and secure effective, unbiased, and transparent artificial intelligence according to ISO 42001 and ISO 42005. Practical, applicable, and fitting within the existing management system. No theoretical models, but clear choices, workable agreements, and demonstrable control.

The EU has not recognized these ISO standards and is working on a European variant: prEN 18286. This standard is still under development, but its structure is largely in line with ISO 42001, although the objectives of both differ. ISO 42001 focusses on responsible behavior, while prEN 18286 has a focus on legal compliance with the EU AI Act.

The integration of this European standard into an ISO-based AI management system is doable. I also offer full support in this.

Together with the organization, I conduct an AI system impact assessment (in accordance with ISO 42005). We clarify what the use of AI means for individuals, groups, and society. This analysis identifies risks and opportunities and forms the basis for transparent, effective, and fair use of AI. In addition, I teach organizations how to conduct these impact assessments themselves, so that responsible AI management is structurally embedded and does not remain dependent on external consultants.

Through internal audits, I assess whether agreements are actually working in practice and where adjustments are needed. Is there a gap between AI ambitions and the current management system? If so, I will help to bridge that gap. Without bureaucracy, but with clear processes, ownership, and oversight.

In this way, AI becomes not a risk, but a controlled and valuable part of the organization — and can the opportunities offered by artificial intelligence truly be harnessed.