Are You an AI Provider or an AI User? ISO/IEC 42001 Roles Explained
ISO/IEC 42001 requires you to determine your role, and that role decides which Annex A controls apply. How to tell whether you are an AI provider, producer, customer or user.
-
-
Cloud AI and ISO/IEC 42001: allocating responsibility before your audit
What ISO/IEC 42001 control A.10.2 requires when your AI runs on someone else’s cloud, the gaps we find as auditors, and four steps to take before your audit.
-
ISO/IEC 42005: What an AI System Impact Assessment Actually Requires
A risk assessment asks what could harm the organisation. An AI system impact assessment asks who the organisation could harm. ISO/IEC 42005:2025 is the first international standard devoted to the second question, and it is the implementation detail behind ISO/IEC 42001 clause 6.1.4.
-
AI Has Made Phishing Unspottable: Why Awareness Training Is No Longer Enough
Generative AI removed every tell that phishing training taught. A cybersecurity assessor explains why user detection can no longer be your primary defence, and what replaces it.
-
AI Governance | PCI DSS Compliance Guides | PCI DSS Level 1 QSA Service-Simplifying compliance for You
PCI DSS and AI: Protecting Cardholder Data in AI Systems
AI is entering payment environments fast. How PCI DSS applies to AI and LLM systems, where cardholder data leaks, and how to keep it safe.
-
How Does AI Affect Human Rights, and How Should It Be Governed?
AI now mediates hiring, healthcare, education, policing and public benefits. A rights-based analysis of where AI presses hardest on internationally recognised human rights, and the ten-pillar governance framework that closes the gap between principle and enforceable accountability.
-
New Zealand’s First ISO/IEC 42001 Certification: Datacom’s Datascape, Audited by Cianaa
Datacom’s Datascape is the first New Zealand-based recipient of ISO/IEC 42001:2023 certification for AI management systems, audited by Cianaa’s independent auditors with the certificate issued by MSECB.
-
ISO/IEC 42001:2023 – The New Global Standard for Responsible AI Management
ISO/IEC 42001:2023 is the world’s first international standard dedicated to Artificial Intelligence Management Systems (AIMS). Published in 2023, this standard provides a comprehensive, certifiable framework for organizations to govern the…
-
Artificial Intelligence Governance and Compliance Framework-Practical Guide
AI governance is becoming the next pillar of enterprise compliance. This practical guide outlines the framework and controls organisations need to deploy AI responsibly and demonstrate accountability under ISO/IEC 42001.
