The ISO/IEC 42001 standard for Artificial Intelligence Management Systems (AIMS) specifies requirements for establishing, implementing, maintaining, and continually improving an AI management system within the context of an organization. Organizations are expected to apply these requirements with particular attention to the features and risks that are unique to AI.
Characteristics such as continuous learning and adaptation, along with potential challenges in transparency and explainability, can introduce additional concerns compared to traditional approaches. These often require tailored safeguards and controls.
Adopting an AI management system to strengthen and extend existing management structures is a strategic decision. This course delivers practical, real-world guidance on how to successfully implement an AI management system from end to end, based on proven implementation experience.
ARTIFICIAL INTELLIGENCE
ISO/IEC 42001 MANAGEMENT SYSTEM FOR AI
Management systems help organizations develop and use AI systems responsibly in pursuit of their objectives while meeting regulatory requirements, as well as the obligations and expectations of interested parties. This course will provide an understanding of how this is done. It will draw on our experience developing ISO/IEC 42001 management systems and explain the various components and how they are integrated to better manage the AI data and system lifecycles through alignment with strategic objectives, assessing risk and deploying controls throughout the AI data lifecycle and the AI system lifecycle to develop and operate trustworthy AI systems and integrating an AI management system with the organisation's existing structures.
WHAT YOU WILL LEARN:
Management system practices for developing and operating trustworthy AI:
- 01 Deciding on the scope and objectives of an AI management system
- 02 Establishing leadership, aligning with strategic objectives
- 03 Organizational roles, responsibilities and authorities for AI systems
- 04 Resources, competence and awareness to support AI systems
- 05 Documentation, transparency and decision record-keeping
- 06 Operational planning and control, risk assessment and treatment
- 07 Monitoring, measurement, analysis and evaluation of AI systems
- 08 Reacting to nonconformity and enabling continual improvement
COURSE DURATION
2 DAYS
Our virtual courses and workshop training are developed from our practical experiences with the management of information and technology and implementation of data protection at numerous clients during the last 20 years.
The most significant advantage of our courses is the breadth of knowledge we can present to attendees and our in-depth understanding of the legal obligations and engineering requirements established through our ongoing design, development and implementation of management systems for AI. This two-day course will provide participants with an understanding of the process, practices and procedures of a management system for artificial intelligence systems. It will address the requirements of the GDPR, DORA, NIS2 and under the EU AI Act for:
- AI system inventories and CMDBs
- AI policies and objectives
- AI impact assessments
- AI management system processes
- AI system life cycle controls
- data governance and controls for AI
- technical documentation for AI systems
- record-keeping
- provision of information to users
- human oversight
- accuracy, robustness and cybersecurity
- control of suppliers and other third-parties
- conformity assessments and certification
Participants will learn about:
Plan
- provide management direction and support for AI systems according to business requirements and applicable legal obligations (including contractual obligations)
- define and document the processes for the responsible use of AI systems
- develop and document processes for the responsible design and development of the AI systems
- identify and document relevant resources required for the activities at given AI system life cycle stages and other AI-related activities
- specify and document requirements for the new AI systems or material enhancements to existing systems
- identify and document the use of data (including personal data), system and computational resources, and tooling required for AI activities
- understand the role and impacts of data in AI systems
- perform and document the results of AI system impact assessments
- allocate the responsibilities within the AI system life cycle between the organisation, its partners, suppliers, customers and third parties
- understand the organization's responsibilities and remain accountable for third party activities
Operate
- ensure that relevant interested parties have the necessary information to understand and assess the risks and their impacts
- use AI responsibly and per organisational and AI policies
- implement data management processes for AI systems
- monitor and mitigate the risk from using artificial intelligence systems
- manage third parties involved at each stage of the AI system life cycle
- assess and mitigate the risk of reliance on third parties for responsibilities allocated to them
- enable third parties to assess and treat the risks related to reliance on AI products and services developed by the organisation
- establish computational controls for AI systems
- maintain functional safety
- maintain a process for employees of the organisation to report concerns about the organization's role with respect to an AI system throughout its life cycle
- maintain a process for verifying and recording the provenance of data used in AI systems over the life cycles of the data and the AI system
Evaluate
- adherence to and implementation of organisational and AI policies
- verify and validate the use of AI systems
- assess and mitigate the risk of reliance on third parties for responsibilities allocated to them
- evaluate the performance of responsibilities within the AI system life cycle allocated between the organisation, its partners, suppliers, customers and third parties
Improve
- suitability, adequacy and effectiveness of organisational and AI policies
- achievement of AI system objectives
WHO SHOULD DO THIS COURSE?
This 2-day course is designed for the following audience:
- AI providers, AI representatives
- AI developers, designers, operators
- IT managers, data protection officers
- Internal auditors
- Governance managers
- Compliance officers
- Risk managers
- Information security managers
- Legal officers
On completion of this course participants will be able to:
- Articulate the requirements of an artificial intelligence management system
- Design, develop, implement, maintain, continually improve and document an artificial intelligence management system in accordance with the EU AI Act and ISO standards
- Identify the processes needed, their interactions, and operationalisation
- Clarify the roles and responsibilities for the artificial intelligence systems
- Integrate, operate and monitor key operational practices
- Ensure that the artificial intelligence management system addresses the mandatory and voluntary obligations
