ISO/IEC 42001 Lead Auditor: AI Management System

Why AI assurance is becoming a requirement

ISO/IEC 42001 is the first management system standard for artificial intelligence. It arrived because organisations deploying AI increasingly need to show regulators, customers and their own boards that the technology is governed, not just adopted.

For Australian organisations this is converging with several pressures at once: the Voluntary AI Safety Standard, procurement requirements that now ask AI-specific questions, and the practical reality that an AI system making decisions about people carries risk that existing frameworks were not designed to catch.

Auditor, not implementer

This is the audit-side course. It assumes you want to assess an AI management system rather than build one, whether as an internal auditor, a second-party auditor reviewing suppliers, or on the path toward third-party certification work.

The emphasis is on evidence. What does adequate AI impact assessment look like on paper? How do you test whether a stated human-oversight control actually operates? What constitutes a major nonconformity in this context?

What you will learn

• Explain the purpose, structure and requirements of ISO/IEC 42001
• Plan and lead an audit of an AI management system
• Assess AI-specific risks, impacts and controls against the standard
• Apply audit principles, evidence gathering and sampling techniques
• Write clear, defensible audit findings and nonconformity reports
• Manage an audit team and report to management

Course content

1. 1. AI management systems and ISO/IEC 42001

   Why an AI-specific management system standard exists and what it requires.

2. 2. AI risk and impact assessment

   Assessing risks to and from AI systems, including impacts on individuals.

3. 3. Audit principles and planning

   Audit programme, objectives, scope, criteria and the audit plan.

4. 4. Conducting the audit

   Opening meeting, evidence collection, interviews and observation.

5. 5. Findings and reporting

   Classifying nonconformities, drafting the report, follow-up and closure.

6. 6. Leading an audit team

   Competence, allocation of work, and managing difficult situations.

Exam and certification

Open-book written exam delivered online through PECB Exams, covering audit competencies and applied scenarios.

Your fee includes your first exam attempt and one free retake within 12 months. After passing, you can apply for the relevant PECB credential.