ISO/IEC 42006:2025
What is ISO/IEC 42006:2025?
ISO/IEC 42006:2025 sets the additional requirements to ISO/IEC 17021-1 for certification bodies auditing and certifying artificial intelligence management systems to ISO/IEC 42001: impartiality rules that bar consultancy in AI, information security, data protection and risk management to certification clients and bar internal audits under any name; liability cover in proportion to clients' turnover; Table 1's six knowledge and skill areas across application review, auditing and decision-making, including AI legal obligations; access to confidential AIMS information such as source code and raw data; scopes by AI role; and a normative audit-time method built on the persons involved in the AI life cycle, with extra surveillance for high-risk AI. Adopted as BS, SS, SIST, UNI CEI and IS editions and under CEN enquiry as prEN ISO/IEC 42006; accreditation criteria in India, the United States, Canada, the United Kingdom, Japan and elsewhere. Built from the held published and FDIS text to 7.1.3.3.3, the full contents page to the second level of Annex A, and certification bodies' and accreditation bodies' documents that cite its clauses; the text past 7.1.3.3.3 is not held. It comprises 63 controls organised across 7 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where ISO/IEC 42006:2025 overlaps with the standards you already hold
What ISO/IEC 42006:2025 means in your sector
What ISO/IEC 42006:2025 means for your job
Questions people ask about ISO/IEC 42006:2025
What is ISO/IEC 42006:2025?
How many controls does ISO/IEC 42006:2025 have?
Where does ISO/IEC 42006:2025 apply?
Which version of ISO/IEC 42006:2025 is covered here?
Query ISO/IEC 42006:2025 programmatically
ISO/IEC 42006:2025, its 63 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO/IEC 42006:2025 API reference and MCP config →How ready are you for ISO/IEC 42006:2025?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.