← All courses
$20

ISO/IEC 42001 in Practice: Build Your AI Management System

ISO/IEC 42001 is the international standard for running AI responsibly across an organization, and companies can be certified against it. In this course you build the core records of an AI management system for a made-up insurer with six AI systems: the scope, the AI policy and roles, the risk and impact assessments, the choice of controls in a Statement of Applicability, day-to-day lifecycle and supplier records, and an internal audit, so you know what an auditor will ask for. For governance, quality, IT and compliance leads. The practice controls are our own illustrative examples, not the standard's text. Educational, not legal advice.

"We have a working AI management system on paper and in practice: scoped, assessed, controlled and audited, with a clear list of gaps before certification"

6 Interactive Sessions

Short, interactive sessions — watch it work, steer it, then build it yourself. Go deeper anytime with the full written chapters.

  1. 1

    What an AI management system is

    ISO/IEC 42001 asks for a management system: a steady, repeating way for a whole organization to run its AI responsibly. You start by writing down who cares about your AI and what the system covers.

  2. 2

    Policy, roles and goals

    Leaders set the direction with a short AI policy, give each job one accountable person, and set goals you can measure. You build all three from the messy documents a company already has.

  3. 3

    AI risk and impact assessment

    A risk assessment asks what could go wrong for the company. An impact assessment asks what an AI system could do to people. You need both, and each feeds the other.

  4. 4

    Choosing controls: the Statement of Applicability

    You choose the controls your risks and impacts call for, and write each choice and its reason in a Statement of Applicability. A control you leave out needs a reason, and a control you include needs proof it works.

  5. 5

    Running it day to day

    An AI management system lives in its records. Each AI system leaves a trail from design to retirement, and each AI supplier is checked against the same questions.

  6. 6

    Audit, review and certification

    Before an outside auditor arrives, you check the system yourself with an internal audit, leaders review it, and you fix what you find. Then you list the gaps that stand between you and a certificate.

Skills you'll practise

AI Management SystemScope & ContextAI Risk & Impact AssessmentStatement of ApplicabilityLifecycle RecordsInternal Audit & Certification

Practice data included

  • A made-up insurer with 6 AI systems (2 built, 4 bought)
  • Two suppliers' AI questionnaires
  • A messy set of existing policies
  • Risk register, impact assessments, practice controls and an internal audit

What you walk away with

Shareable portfolio

A public URL showing your module timeline, patterns mastered, and completion status.

Everything you build

Download all your work as a ZIP file. It is yours to keep.

Module walkthrough

Each module documented with deliverables and the production pattern you implemented.

Ready to start ISO/IEC 42001 in Practice: Build Your AI Management System?

First course free. $20 per course after that.