ISO/IEC 42006:2025

ISO/IEC 42006:2025 sets the additional requirements to ISO/IEC 17021-1 for certification bodies auditing and certifying artificial intelligence management systems to ISO/IEC 42001: impartiality rules that bar consultancy in AI, information security, data protection and risk management to certification clients and bar internal audits under any name; liability cover in proportion to clients' turnover; Table 1's six knowledge and skill areas (general AIMS requirements; AIMS standards and schemes; AI legal obligations; AI terminology, principles, practices, tools and techniques; the client's sector; the client's products, processes and organization) defined for auditing, for reviewing and deciding, and for application review and audit-time determination, with the audit team collectively covering every ISO/IEC 42001 Annex A control and able to trace incidents with serious negative effects on affected persons back to the AIMS; and the 17021-1 process clauses supplemented for AIMS: audit programme, scope, audit time under the normative Annex A, multi-site sampling, integrated systems, planning and remote audits, the two-stage initial audit, decisions, surveillance, recertification, special audits, suspension and withdrawal, appeals, complaints and records. Used by accreditation bodies as the criteria document for AIMS certification programmes.