ISO/IEC 42001
Prepare for ISO/IEC 42001
Cipher Projects helps you put an AI management system in place. A certification body accredited by JAS-ANZ issues the certificate. We do not.
- Scope
- Named owners
- Risk and impact records
- Review log
What you leave with
The records an auditor samples
01
Scope
Which legal entity is in, which AI systems are in, and which are out.
02
Owners
A named person for each system in scope, and the review interval that person keeps.
03
Risk and impact
What the system does, who it affects, and the control for each risk you choose to treat.
04
Review log
Policies, tests, and the dates someone signed that the system was still doing what you intended.
The practical checklist is the six practices. You need your own copy of ISO/IEC 42001:2023. ISO sells it.
The certificate
A JAS-ANZ accredited body decides
JAS-ANZ register of accredited bodies. Look for the AI Management System Scheme, and for ISO/IEC 42001 on that body's scope.
The audit
The AI assurance audit stays the priced start
Audit fee on the pricing page. Preparation is listed there as its own item, with no public rate. The AI strategy page is the audit.
FAQ
Questions before you book preparation
The certificate, the audit fee, and what Australian law does and does not require.
Do you issue an ISO 42001 certificate?
- A certification body accredited by JAS-ANZ issues the certificate. Cipher Projects prepares the management system. Before you engage a body, check that ISO/IEC 42001 is on its scope in the JAS-ANZ register that day.
Is ISO 42001 preparation included in the AI assurance audit?
- The audit fee does not include it. The audit is a fixed fee and a written roadmap. ISO/IEC 42001 preparation is quoted on its own, after the systems in scope are clear. There is no public rate. The audit price is on the pricing page.
Does Australian law require ISO 42001?
- No Australian law requires ISO/IEC 42001. It is voluntary. Some boards, insurers, and buyers ask for the certificate.
How long does preparation take?
- An auditor samples a system that has already been running. We set the date after we see which systems are in scope.
Who runs the internal audit?
- Someone who did not write the system. If we help you write it, we will tell you to use another person for the internal audit before you book the certification body.
Next step
Tell us which systems would be in scope.
We reply within 24 hours with whether preparation is worth it, and what the quote depends on.