ISO 42001 and AI Governance

Quality and internal-audit staff who already run ISO 9001, IATF 16949 or ISO 27001 and are being asked to add AI, and engineers in plants, GCCs and IT services firms who have shipped a model that a customer's auditor now wants to see governed. IT services firms and global technology centres were among the first organisations certified to ISO 42001, and they recruit AI governance analysts and AI auditors out of exactly these roles.

No, and the page will never say otherwise. The IAPP AI Governance Professional certification and the ISO/IEC 42001 lead implementer and lead auditor qualifications are paid, externally examined credentials awarded by those bodies, and this course is neither of them. The lessons here come from AIGP masterclass material and from AI governance practitioners, so the body of knowledge overlaps closely, but what you finish with is an EDWartens Certificate of Completion. Employers who ask for a lead auditor certificate will still ask for it, and classroom lead implementer or lead auditor training is a paid, multi-day course that typically costs from several hundred to a few thousand US dollars.

No coding and no experience of building AI systems. Time inside any management system helps a great deal, because clauses 4 to 10 will already look familiar; if you have never worked in one, the first two modules build that vocabulary before the clause work starts.

Not to complete the course. The modules teach the clause structure and what each clause asks an organisation to produce, using freely available lessons. The standard itself is a copyrighted document sold by ISO and by national standards bodies, and this course does not reproduce its text. Any organisation actually implementing an AIMS should buy a copy.

Each module ends with a task on a system you can see: an AI system inventory, six risk statements scored against your own criteria, a one-page clause 6.1.4 impact assessment, a document gap list marked exists, uncontrolled or missing, a lifecycle record reconstructed backwards, and an EU AI Act tier and operator-role call for three systems. If your organisation builds nothing, run all of them against a bought-in tool your team already uses, such as a chatbot or a coding copilot.

Yes. Every module, practice task and assessment. You create an account so your progress is saved and the assessments can be marked. The certificate is the only paid item, and only if you want it.

An EDWartens Certificate of Completion, issued when you have finished every module and passed the final assessment at 60 per cent, with a verification code anyone can check. It is not a vendor credential, not an accredited certification, and is never described as one.

The creators named in the Credits block at the foot of this page, on their own YouTube channels. EDWartens did not make the videos and the creators are not affiliated with EDWartens. What EDWartens wrote is the study plan, the notes, the practice tasks and the assessments.