ISO 42001 Certification: Process, Timeline, Cost and Certification-Body Selection
Plan ISO 42001 certification: scope, AIMS implementation, audit phases, cost drivers and selection of a competent certification body.
ISO 42001 certification evaluates whether an AIMS meets the standard and operates effectively in practice. A credible plan starts with scope and the AI inventory rather than a generic fixed price. Time and cost are mainly driven by the number and criticality of AI systems, roles, sites, suppliers and existing management systems.
The route to certification readiness
- Define the certification objective and AIMS scope
- Inventory AI systems and provider/deployer roles
- Perform a gap assessment and prioritise actions
- Assess AI risks and impacts
- Implement governance, controls and evidence
- Complete internal audit and management review
- Complete the external audit and corrective actions
What drives time and cost
| Factor | Effect |
|---|---|
| Number of AI systems | More systems require more inventory work, assessment and evidence. |
| In-house development | Training, data, testing and lifecycle governance increase scope. |
| High-impact use cases | Effects on people or critical decisions require deeper review. |
| Third parties | Contracts, information, monitoring and exit arrangements need assessment. |
| Existing ISO systems | Shared processes may be reused once AI-specific requirements are added. |
Selecting a certification body
- Ask for evidence of competence and an ISO/IEC 42001 audit programme
- Check accreditation status and scope
- Request transparent audit time, site, remote and travel assumptions
- Ensure independence from consulting
- Confirm the timetable for Stage 1, Stage 2 and possible follow-up audits
Why generic cost figures are weak
There is no official universal price for ISO 42001 certification. Separate internal implementation, external consulting, technical measures and certification-body fees. Comparable quotes require a defined scope.
An existing ISO 27001 or ISO 9001 system can provide shared processes, but no fixed saving should be promised. Actual benefit depends on maturity and integration quality.
How Sternberg Consulting supports you
We structure AI inventory, risks, roles, evidence and internal review into a pragmatic AIMS. Learn more about ISO 42001 consulting.
Frequently asked questions
How long does an ISO 42001 project take?
A reliable estimate requires scope, AI inventory and gap assessment. A small user organisation may need much less work than an AI product provider.
Who can certify?
Select an independent certification body and verify its competence and accreditation status for the intended scope.
Can consulting and certification be provided by the same party?
Independence matters. The certification decision must not be made by the consultant who built the system.