Skip to content
Vol. 1 · Ed. 2026
CyberGlossary
日本語
Entry № 624

ISO/IEC 42001

ISO/IEC 42001 とは何ですか?

ISO/IEC 42001The first international management-system standard for AI, published in December 2023, specifying requirements to establish, implement, maintain, and continually improve an AI Management System (AIMS) for organizations that develop or use AI.

ISO/IEC 42001:2023, 'Information technology — Artificial intelligence — Management system,' is the AI counterpart of ISO/IEC 27001. It defines requirements for an AI Management System (AIMS) covering scope, leadership, planning, support, operation, performance evaluation, and improvement, plus Annex A controls organized into governance, AI policies, internal organization, resources, AI-system lifecycle, data for AI, information for interested parties, use of AI, and third-party relationships. Adoption is driven both by regulators (the EU AI Act references ISO management standards as evidence of conformity for some risk-management obligations) and by enterprise customers asking AI vendors for assurance. Independent certification bodies began offering ISO 42001 certification audits in 2024, and several major AI vendors (Anthropic, AWS AI services) achieved certification through 2024–2025. The standard pairs well with ISO 27001 (for the security of the AIMS), ISO 27701 (privacy), and the NIST AI RMF (a non-prescriptive but compatible companion framework).

● 例

  1. 01

    An LLM vendor maps its model-evaluation, red-teaming, and incident-response programs to Annex A controls in pursuit of ISO/IEC 42001 certification.

  2. 02

    An enterprise procurement team adds 'ISO/IEC 42001 certification or equivalent attestation' as a contractual requirement for any AI-platform vendor.

● よくある質問

ISO/IEC 42001 とは何ですか?

The first international management-system standard for AI, published in December 2023, specifying requirements to establish, implement, maintain, and continually improve an AI Management System (AIMS) for organizations that develop or use AI. サイバーセキュリティの コンプライアンスとフレームワーク カテゴリに属します。

ISO/IEC 42001 とはどういう意味ですか?

The first international management-system standard for AI, published in December 2023, specifying requirements to establish, implement, maintain, and continually improve an AI Management System (AIMS) for organizations that develop or use AI.

ISO/IEC 42001 はどのように機能しますか?

ISO/IEC 42001:2023, 'Information technology — Artificial intelligence — Management system,' is the AI counterpart of ISO/IEC 27001. It defines requirements for an AI Management System (AIMS) covering scope, leadership, planning, support, operation, performance evaluation, and improvement, plus Annex A controls organized into governance, AI policies, internal organization, resources, AI-system lifecycle, data for AI, information for interested parties, use of AI, and third-party relationships. Adoption is driven both by regulators (the EU AI Act references ISO management standards as evidence of conformity for some risk-management obligations) and by enterprise customers asking AI vendors for assurance. Independent certification bodies began offering ISO 42001 certification audits in 2024, and several major AI vendors (Anthropic, AWS AI services) achieved certification through 2024–2025. The standard pairs well with ISO 27001 (for the security of the AIMS), ISO 27701 (privacy), and the NIST AI RMF (a non-prescriptive but compatible companion framework).

ISO/IEC 42001 からどのように防御しますか?

ISO/IEC 42001 に対する防御は通常、上記の定義で述べたとおり、技術的統制と運用上の実践を組み合わせます。

ISO/IEC 42001 の別名は何ですか?

一般的な別名: AIMS, AI Management System standard。

● 関連用語