Services / Packages
ISO/IEC 42001 Implementation
Hands-on help building the AI management system ISO/IEC 42001 requires, ready for a certification audit.
From $15,0003–6 months
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
Your gap assessment is done and you’re ready to build.
You’ve committed to certification by a customer or contract deadline.
You want implementation built inside the management system you already run.
Overview
After a gap assessment shows what’s missing, we help you build it: the AI policy, roles, risk and impact assessment processes, required documentation, and the controls you select from Annex A. We prepare your team for the internal audit and management review that come before certification.
What’s included
- Implementation plan based on your gap assessment
- AI policy, objectives, and roles
- AI risk and impact assessment processes
- Statement of Applicability for Annex A controls
- Required documentation and records
- Readiness for internal audit and certification
How it works
Plan
We turn the gap assessment into a prioritized implementation plan.
Build
We develop the policies, processes, and documentation with your team.
Prepare
We get you ready for the internal audit, management review, and certification audit.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies implement ISO/IEC 42001 to win enterprise customers and prove responsible AI.
- Readiness for customer audits
- Integration with ISO/IEC 27001
- Evidence for regulators and partners
- A path to third-party certification
Public Sector
Public institutions implement ISO/IEC 42001 as a recognized structure for agency-wide AI oversight.
- A standard structure for AI governance
- Documentation that supports audits
- Alignment with state AI policies
- Requirements to reference in vendor contracts
Nonprofits
Larger nonprofits implement ISO/IEC 42001 to show funders and partners that AI is governed to a recognized standard.
- A phased approach sized to your budget
- Controls for client and health data
- Evidence for funders and partners
- Certification when you’re ready
Frequently asked questions
How much does ISO/IEC 42001 Implementation cost?
ISO/IEC 42001 Implementation starts at $15,000. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
Most engagements take 3–6 months, depending on scope and how quickly information is available.
What do we receive?
The engagement includes: implementation plan based on your gap assessment; AI policy, objectives, and roles; AI risk and impact assessment processes; statement of Applicability for Annex A controls.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Governance Blueprint for Credit UnionsWho owns AI decisions at a credit union, how new AI uses get approved, how the board oversees AI, and how to size the structure to your asset size.
- AI Risk Register for Credit UnionsA sample register of common credit union AI uses, the data each one touches, its risk tier, the controls it needs, and who owns it.
- AI Impact Assessment Example for Credit UnionsA worked example assessing an automated personal loan decision model, from purpose and data to risks, controls, and approval.
- AI Laws by StateWhere each state’s AI and privacy rules stand, with key dates and a page for every state.
Related services
ISO/IEC 42001 Gap Assessment
An assessment of your AI management system against ISO/IEC 42001, the international standard for governing AI.
ISO/IEC 42001 Internal Audit
The independent internal audit ISO/IEC 42001 requires, conducted by a qualified lead auditor.
Fractional Chief AI or Privacy Officer
A named senior executive who owns your AI governance or privacy program and reports to your leadership.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.