ISO/IEC 42001 is the correct answer because it is an Artificial Intelligence Management System (AIMS) standard that organizations can implement to demonstrate structured and responsible governance of AI. CompTIA SecAI+ explicitly includes ISO AI standards within the governance, risk, and compliance domain and expects candidates to distinguish standards from regulatory frameworks. ISO/IEC 42001 specifies requirements for establishing, implementing, maintaining, and continually improving an AI management system. Its scope includes responsible AI use, governance, risk management, accountability, transparency, and organizational controls. ISO describes the standard as applicable to organizations that develop, provide, or use AI systems and specifically identifies responsible AI and AI governance among its benefits. GDPR is legally binding privacy legislation rather than an AI management-system certification. The EU AI Act is also legislation and establishes regulatory requirements based on AI risk. NIST AI RMF provides voluntary risk-management guidance but is not itself an organizational certification standard. Therefore, ISO/IEC 42001 is the option specifically designed to support certifiable organizational AI-management practices.
================
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit