ISO 42001 – Where to Start with AI Governance

Watch the Webinar On Demand

AI is becoming part of everyday work across organisations, from third-party tools and copilots to AI-powered features and systems developed internally.

As adoption grows, organisations need a clearer understanding of where AI is being used, who is responsible for it and how decisions about its use are being made.

ISO/IEC 42001 provides a structured approach to managing AI through an AI management system, helping organisations establish responsibilities, assess risks and impacts and build appropriate governance around the way AI is developed, provided or used.

In this on-demand webinar, Secarma explains what ISO 42001 covers and the practical steps organisations can take to begin building a more consistent approach to AI governance.

Whether ISO 42001 certification is already part of your plans or you simply want greater oversight of how AI is being used within your organisation, the session will help you understand where to begin and what to prioritise.

Watch the full webinar below.

What does the webinar cover?

During the session, we explore:

• What ISO 42001 is and what an AI management system involves
• How to identify where AI is being used across your organisation
• Defining the scope of your approach to AI governance
• Assigning clear responsibilities for AI use, approval and oversight
• Understanding AI risks and the potential impact on your organisation and the people affected
• Establishing policies and guidance that teams can use in their day-to-day work
• How AI governance works alongside technical security testing
• How to build on governance and management processes you may already have in place
• Practical first steps towards implementation and what to consider if ISO 42001 certification is your goal

Start by understanding how AI is already being used

Effective AI governance starts with visibility.

Before introducing new policies or controls, organisations need to understand which AI tools and systems are already being used, what information they can access and how they support business processes or decisions.

This may include approved business tools, third-party platforms, AI functionality built into existing software, internally developed systems and tools employees have started using independently.

Building that picture gives you a clearer foundation for deciding what should be governed, who needs to be involved and where greater oversight may be required.

Make responsibilities and expectations clear

AI governance should make it easier for people to use AI appropriately, rather than simply creating additional policies.

Clear ownership helps teams understand who can approve new AI tools, who is responsible for reviewing risks and impacts and when decisions require human oversight.

Practical guidance can also help employees understand what tools they can use, what information can be shared and what they should consider before introducing AI into an existing process.

ISO 42001 provides a framework for bringing those responsibilities together into a more consistent management approach.

Connect AI governance with technical security

Governance and technical security work together.

Policies, responsibilities and risk assessments help define how AI should be used. Technical security testing helps organisations understand how AI-powered systems behave in practice and whether the wider environment around them is appropriately protected.

For organisations introducing AI-powered features, agents, copilots or systems connected to sensitive data and internal applications, bringing these two areas together can provide greater assurance than looking at either in isolation.

If you are also exploring the technical security of AI-powered systems, you can watch our AI Security Testing webinar on demand.

Who should watch?

This webinar is designed for anyone involved in introducing, managing or overseeing AI within their organisation, including:

• Business leaders
• IT managers and IT teams
• Information security professionals
• Risk and compliance teams
• AI governance teams
• Operations leaders
• Anyone responsible for implementing or preparing for ISO 42001

It will be useful whether your organisation is using third-party AI tools, introducing AI-powered features or developing its own AI systems.

No previous knowledge of ISO 42001 is required.

Take your first steps towards clearer AI governance

You do not need to solve every aspect of AI governance at once.

Starting with a clear understanding of where AI is being used, who is responsible and what risks and impacts need to be considered can help you build a practical approach that develops alongside your organisation.

ISO 42001 provides a framework for making that approach more structured, repeatable and accountable.

Watch the full session below to understand the standard, identify your first priorities and take practical steps towards stronger AI governance.

If you would like support understanding ISO 42001 or building a practical approach to AI governance within your organisation, get in touch with Secarma.