ISO 42001 Certification Support for Organisations Using AI

We help organisations build an AI management system that delivers real improvements in how AI is selected, used and overseen, while achieving and maintaining ISO 42001 certification with minimal administrative overhead. Our approach starts with how AI is actually used in your business, so the system reflects your reality rather than a theoretical model.

• Qualified ISO 42001 and ISO 27001 Lead Auditor
• Hands-on ISO 42001 implementation experience in Australia
• Australia-wide and remote
• Veteran-owned business

How we work

• Information security and AI governance together. Where an ISO 27001 system is already in place, much of the groundwork is done, and ISO 42001 can build on it rather than sit beside it.
• Starting with your AI inventory. We work with your team to map the AI tools and use cases across the business, then carry out risk and impact assessments for each one.
• Clear on time and cost from the start. Most organisations take three to six months. A first year, including the certification body’s audit, commonly sits around $20,000 to $60,000, depending on scope and the complexity of your AI use.
• Flexible ways to engage. We can build the system for you, mentor your own team through it, or carry out the internal audit ahead of certification.

The process

1. A free consultation to understand how your organisation uses AI, your scope and your timeframe.
2. A gap analysis against ISO/IEC 42001, with a fixed plan for the work ahead.
3. Implementation and certification support, covering the AI inventory, risk and impact assessments, policies and controls, internal audit and management review, through to the certification audit.

Recent work

For a contact centre and message answering service, we built an ISO 27001 system alongside ISO 9001, followed by an ISO 42001 AI management system in 2026, including an impact assessment for each AI use case.

What our clients say

Common questions

Is it the AI tool that gets certified, or the organisation? The organisation. ISO 42001 certifies how AI is governed across your business, not a particular product.

Does ISO 42001 apply if we only use AI tools from other providers? Yes. Most of our clients use AI rather than develop it, and the standard covers both.

Is ISO 27001 a prerequisite? No, although organisations that already hold it generally find ISO 42001 quicker to add.

Let’s have a conversation

Book a free 20-minute consultation to talk through your goals and how we might help.