TLDR: The British Standards Institution (BSI) has published BS ISO/IEC 42006:2025, the world’s first international standard specifically for bodies that audit and certify AI management systems. Launched on July 21, 2025, and effective July 31, this standard aims to bring consistency, credibility, and trust to the rapidly expanding AI audit market, addressing concerns about unchecked providers and ensuring robust AI governance.
The British Standards Institution (BSI), the UK’s national standards body, has announced the publication of a groundbreaking international standard, BS ISO/IEC 42006:2025, set to be fully unveiled on July 31, 2025. Titled ‘Information technology — Artificial intelligence — Requirements for bodies providing audit and certification of artificial intelligence management systems,’ this new guidance is designed to professionalize the burgeoning AI audit market.
The standard’s primary objective is to provide a structured framework for certifying bodies that independently audit AI management systems, ensuring a clear, consistent, and coherent approach to AI governance. This move is critical in preventing a ‘wild west’ scenario of unchecked providers, allowing regulators, customers, and investors to confidently identify credible AI assurance providers.
Mark Thirwell, Global Digital Director at BSI, emphasized the urgency of this standard, stating, “There is a risk of a ‘wild west’ of unchecked providers and the potential for radically different levels of assessment. Only robust, coherent and consistent audits will build much-needed confidence in a safe, secure AI ecosystem.” He further added, “This standard will enable regulators, customers, and investors to differentiate credible AI governance implementations from unchecked claims, supporting responsible AI innovation and paving the way for AI to be a force for good.”
BS ISO/IEC 42006:2025 complements BSI’s earlier publication, BS ISO/IEC 42001:2023, which was the first AI management standard released in late 2023 and has already seen organizations like KPMG Australia certified. While BS ISO/IEC 42001 outlines how companies should govern the development and deployment of AI systems, the new 42006 standard focuses specifically on the requirements for the bodies that audit and certify compliance with 42001. It provides additional requirements and guidance to ISO/IEC 17021-1, which governs management system audit and certification.
The standard addresses critical industry challenges, including a shortage of qualified auditors in the AI market and concerns about the independence and rigor of assurance services often provided by AI developers themselves. It introduces clear competency frameworks for auditors and establishes robust governance mechanisms for assessing compliance.
Also Read:
- Canadian Shareholders Advocate for Ethical AI Governance in Major Corporations
- Türkiye Aligns with EU on AI Regulation Amidst Global Push for Responsible AI Governance
This initiative is expected to have a significant impact globally. As AI becomes more embedded in enterprise operations, demand for credible oversight has surged. Leading accountancy firms, including the ‘Big Four,’ are reportedly launching their own AI auditing programs, and BS ISO/IEC 42006 is poised to become an indispensable reference point for them. The standard is also seen as reinforcing the UK’s leadership in ethical AI governance, providing a globally recognized benchmark to help ensure the responsible and safe deployment of AI applications worldwide.
