ISO/IEC 42001 (AI Management Systems)
An Ethotechnics critique of ISO/IEC 42001, which certifies an organization's AI management system but never gives one system's authority to act an expiry date.
Ethotechnics critique
Where the standard falls short
It certifies management, not authority: An accredited body certifies the organization’s AI management system, and top management reviews it at planned intervals (clause 9.3). Nothing in it gives one system’s authority to act an expiry date, after which the system must stop unless that authority is renewed on evidence.
Continuous improvement can normalize slow harm: “We’re improving” can coexist with multi-quarter remediation cycles in high-stakes contexts.
Artifacts over outcomes: Documentation, training, and lifecycle governance are easier to show an auditor than a record that a challenge changed a rule, or a measure of the time the operator takes from people.
Failure mode
Certified responsibility + unresolved time in harm
Well-managed organizations can still leave the people their systems decide about stuck in harm windows.
The failure mode is a system that passes audits while the people it decides about still cannot compel reversal on a clock.
Mapped clauses
Where an Ethotechnics clause answers an ISO/IEC 42001 clause
Each row names the management-system clause, the Ethotechnics clause that bears on it, and what that clause requires that the management system leaves to the organization.
| ISO/IEC 42001 clause | What it asks | Ethotechnics clause | What the clause adds |
|---|---|---|---|
| 9.1 Monitoring, measurement, analysis and evaluation | The organization decides what to monitor and measure, and evaluates the results. | STD-01 §7.1, STD-06 §2.4 | Two measures are no longer the operator's choice: the time the operator takes from the public, published on a schedule, and error, reversal, and remedy rates for each affected population. |
| 9.3 Management review | Top management reviews the management system at planned intervals. | STD-08 §1.1, STD-08 §1.2 | Each system's authority expires. Renewal needs evidence named before the review period, and a quiet period alone does not renew it. |
| 10.2 Nonconformity and corrective action | The organization corrects a nonconformity and acts on its cause. | STD-02 §4.4 | A defective rule, model, or notice is corrected, and every decision it affected is reversed and every person it harmed restored, found from the institution's own records, without waiting for each person to claim. |
Clause titles are from ISO/IEC 42001:2023. What each asks is paraphrased, not quoted.
Cite this page · APA, MLA, Chicago, BibTeX, RIS
APA
Ethotechnics Institute. (2026). ISO/IEC 42001 (AI Management Systems). Ethotechnics Institute. https://ethotechnics.org/standards/critiques/iso-iec-42001
MLA
Ethotechnics Institute. "ISO/IEC 42001 (AI Management Systems)." Ethotechnics Institute, 2026, https://ethotechnics.org/standards/critiques/iso-iec-42001.
Chicago
Ethotechnics Institute. "ISO/IEC 42001 (AI Management Systems)." Ethotechnics Institute. Oct 6, 2026. https://ethotechnics.org/standards/critiques/iso-iec-42001.
BibTeX
@misc{ethotechnics_standards_critiques_iso_iec_42001,
title={ISO/IEC 42001 (AI Management Systems)},
author={Ethotechnics Institute},
year={2026},
howpublished={Ethotechnics Institute},
url={https://ethotechnics.org/standards/critiques/iso-iec-42001},
version={Draft}
}
RIS
TY - WEB TI - ISO/IEC 42001 (AI Management Systems) AU - Ethotechnics Institute PY - 2026 UR - https://ethotechnics.org/standards/critiques/iso-iec-42001 ER -