{"id":2810,"date":"2026-07-06T13:28:35","date_gmt":"2026-07-06T12:28:35","guid":{"rendered":"https:\/\/icomply.pm\/resources\/article-iso-42001-vs-the-ai-act\/"},"modified":"2026-09-08T12:02:34","modified_gmt":"2026-09-08T11:02:34","slug":"iso-42001-vs-the-ai-act","status":"publish","type":"post","link":"https:\/\/icomply.pt\/en\/resources\/iso-42001-vs-the-ai-act\/","title":{"rendered":"ISO 42001 vs the AI Act: how they fit together"},"content":{"rendered":"

ISO 42001 vs the AI Act: Two of the most significant developments in AI governance are often confused: ISO 42001 and the EU AI Act. They are instruments of a different nature, and understanding the difference is key to implementing them effectively. <\/p>\n

ISO 42001: a management system<\/h2>\n

ISO 42001 is the international standard for an Artificial Intelligence Management System (AIMS). Like ISO 27001 for security or ISO 37301 for compliance, it defines how<\/em> governance is done: policies, objectives, roles, controls, audits, and continual improvement. It is voluntary and certifiable. <\/p>\n

The AI Act: a regulation<\/h2>\n

The EU AI Act is law. It defines what<\/em> you must comply with: risk classification, prohibited practices, obligations for high-risk and general-purpose AI, transparency, and conformity assessment. It is mandatory, with penalties. <\/p>\n

How they relate<\/h2>\n

The relationship is complementary. The AI Act defines the obligations; ISO 42001 gives you the operational machinery to meet them in a repeatable way. Implement the management system and you will have the structure \u2014 risk processes, oversight, documentation \u2014 into which the Regulation\u2019s requirements fit. <\/p>\n

    \n
  • AI Act<\/strong> \u2192 the legal requirements and risk classification.<\/li>\n
  • ISO 42001<\/strong> \u2192 the governance processes that satisfy them.<\/li>\n
  • Shared controls<\/strong> \u2192 a single set of controls evidences both.<\/li>\n<\/ul>\n

    Sell and run it as a single suite<\/h2>\n

    The mistake organisations make is treating this as two projects \u2014 an \u201cISO 42001 module\u201d and an \u201cAI Act module\u201d. In reality, they govern the same AI systems, the same risks, and the same evidence. Run them as a single AI Governance suite<\/strong>: one inventory, one risk model, one evidence library, two layers of requirements on top. <\/p>\n

    That\u2019s how iComply structures AI governance \u2014 and why adding ISO 42001 certification on top of AI Act compliance costs a fraction of doing either one in isolation.<\/p>\n","protected":false},"excerpt":{"rendered":"

    A management system meets a regulation \u2014 and why you operationalise both as a single AI governance suite.<\/p>\n","protected":false},"author":1,"featured_media":2845,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_ice_seo_score":0,"_ice_review":"","footnotes":""},"categories":[38],"tags":[],"class_list":["post-2810","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-governance"],"_links":{"self":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/posts\/2810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/comments?post=2810"}],"version-history":[{"count":4,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/posts\/2810\/revisions"}],"predecessor-version":[{"id":4056,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/posts\/2810\/revisions\/4056"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/media\/2845"}],"wp:attachment":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/media?parent=2810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/categories?post=2810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/tags?post=2810"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}