# ISO/IEC 42001 Lead Implementer (training course)

> Plan, build and run an AI management system, including AI risk and impact assessment.

URL: https://securei3.com/training/iso-42001-lead-implementer/
Level: Implementer
Duration: 5 days
Formats: Virtual instructor-led, In-house
Certificate: Certificate of achievement (on passing) or attendance from Secure iQube

## Who should attend

- AI product leads and data science managers
- Risk, compliance and security professionals
- ISO 27001 practitioners extending to AI

## Learning outcomes

- Explain ISO/IEC 42001 requirements and how they relate to AI regulation
- Scope an AIMS and build an AI inventory
- Run AI risk and impact assessments
- Select and implement Annex A controls
- Prepare an organisation for certification

## Overview

This five-day course gives you the knowledge and skills to plan, implement, manage and maintain an artificial intelligence management system (AIMS) based on ISO/IEC 42001:2023. You learn how to govern AI responsibly across its life cycle: defining your role for each AI system, running AI risk and impact assessments, selecting Annex A controls, and preparing for certification, with practical links to the EU AI Act, the NIST AI RMF and ISO/IEC 27001.

## Why attend

- Lead your organisation’s AI governance programme
- Turn responsible AI principles into auditable controls
- Understand how ISO/IEC 42001 supports EU AI Act and other regulatory obligations
- Learn AI risk and impact assessment methods you can use straight away
- Integrate AI governance with an existing ISO/IEC 27001 ISMS

## Agenda

### Day 1: AI governance and initiating an AIMS
- AI concepts, benefits and risks
- Regulatory landscape: EU AI Act, NIST AI RMF and national guidance
- ISO/IEC 42001 structure and key terms
- Organisational context and roles: developer, provider, user
- Defining the AIMS scope and AI inventory

### Day 2: Planning the AIMS
- AI policy and responsible AI objectives
- Leadership, roles and the AI governance committee
- AI risk assessment (ISO/IEC 23894)
- AI system impact assessment (ISO/IEC 42005)
- Risk treatment and the Statement of Applicability

### Day 3: Implementing AI controls
- Annex A controls across the AI life cycle
- Data quality, provenance and data management
- Transparency and information for interested parties
- Human oversight and responsible use
- Third-party and supplier AI

### Day 4: Operating, monitoring and improving
- Operational planning and change control for AI systems
- Performance monitoring and AI incident handling
- Internal audit and management review
- Corrective action and continual improvement
- Preparing for certification

### Day 5: Case study and assessment
- Integrating with ISO/IEC 27001 and ISO/IEC 27701
- Case study review
- Written assessment

Prerequisites: A general understanding of AI concepts and management systems. No programming knowledge is required.
Assessment: Written assessment. A scenario-based written assessment on the final day, open book, covering the requirements and their practical application. Pass mark 70%. Participants who pass receive a certificate of achievement; others receive a certificate of attendance.
CPD hours: 35

Included:
- Course slides and participant notes
- Practical workbook with exercises and case studies
- Templates you can adapt for your organisation
- Certificate of completion
- 30 days of post-course Q&A support by email
- Refreshments and lunch for classroom sessions

## Frequently asked questions

### Do I need to pass the assessment to receive a certificate?

Participants who pass receive a certificate of achievement. Everyone who attends the full course receives a certificate of attendance.

### How are virtual sessions run?

Live, instructor-led sessions on Microsoft Teams or Zoom, with breakout rooms for exercises, the same materials as the classroom and short breaks every 90 minutes. You need a stable internet connection and a webcam.

### Can this course be run for our team only?

Yes. We deliver it privately, online or at your premises, and use examples from your own systems. In-house delivery is usually more cost-effective for six or more participants.

### How much does it cost?

Fees depend on format, location and group size. Send an enquiry and we will reply with dates and a quote within one working day.


Enquire: https://securei3.com/training/iso-42001-lead-implementer/#enquire