05 — frameworks & standards

ISO/IEC 42001

The certifiable management-system standard for artificial intelligence — the AI equivalent of ISO 27001. It specifies how an organisation establishes, operates and continually improves an AI management system, with Annex A controls covering AI policy, resource and data documentation, impact assessment and lifecycle governance. Because it is certifiable, it is increasingly what enterprise procurement asks for by name.

See also our ISO 42001 page · NIST AI RMF

Related terms

NIST AI RMF Frameworks & standards
The US National Institute of Standards and Technology's voluntary AI Risk Management Framework, organised around four functions — Govern, Map, Measure…

Frameworks & standards

What auditors, buyers and regulators reference. See the compliance crosswalk for the control-by-control mapping.

ISO/IEC 42001 is term 6 of 8 in this part of the glossary.

AMTSO OWASP LLM Top 10 OWASP Agentic Top 10 MITRE ATLAS EU AI ActISO/IEC 42001NIST AI RMF AIUC-1

This page is one entry from the agentic AI security glossary, which defines 60 terms in the same style. Where a term belongs to a published taxonomy or standard — the HackAgent attack families, the OWASP lists, AMTSO's guidelines, MITRE ATLAS, ISO/IEC 42001, the NIST AI RMF, the EU AI Act — the authoritative wording is the source document's, not ours, and specifics should be verified there. "Lethal trifecta" is Simon Willison's term. OWASP® is a trademark of the OWASP Foundation; ATT&CK® and ATLAS™ are trademarks of The MITRE Corporation. Naming a framework here is description, not a claim of certification or endorsement.