Insights
Insights carries the longer arguments behind our practice pages: the standards read closely, and the reasoning set out in full. Each piece answers one question and stands on its own. The first five come from our work on AI governance, from what ISO/IEC 42001 leaves to the board to what certification leaves open under EU AI Act Article 17. Each ends with a practical next step.
- AI Governance
Who decides, who answers: what ISO/IEC 42001 leaves to the board
ISO/IEC 42001 marks two points where the decision belongs to the board. This piece is for board members, CROs and heads of AI governance: what those decisions are, what the board needs in front of it, and how to name who answers for each AI system.
- AI Governance
What an AI control is, and where controls come from
ISO/IEC 42001 lists thirty-eight reference controls, and the EU AI Act sets requirements for high-risk systems. This piece is for compliance leads and anyone building an AI management system: what counts as a control, and how to arrive at one list that answers both.
- AI Governance
Responsible AI as a requirement: ISO/IEC 42001, NIST AI RMF and IEEE 7000
Fairness, transparency and accountability are easy to agree on and harder to build. This piece is for heads of AI governance and delivery leads: how ISO/IEC 42001 turns those values into requirements, where NIST AI RMF names them as outcomes, and how IEEE 7000 gives a team the method.
- AI Governance
AI controls in production: where they live, whether they still work, what to measure
A control written into a policy may never reach the running system. This piece is for enterprise architects and assurance leads: where AI controls have to be enforced, how to test that they still work, and which indicators show it.
- AI Governance
ISO/IEC 42001 certification and EU AI Act Article 17: what each one covers
Article 17 of the EU AI Act requires providers of high-risk AI systems to operate a quality management system. This piece is for those providers and their quality and compliance leads: what an ISO/IEC 42001 certificate contributes, where its reach ends, and who the obligation applies to.
Get direction and delivery working together.
Tell us what governance exists today and where AI actually runs. We will respond with a read on how the direction and the management system line up, and a sensible first step — often an ISO/IEC 42001 gap analysis.