Insights

If your organisation already holds ISO 27001 certification and is now developing, deploying, or using AI systems, you are in the strongest possible position to integrate ISO 42001 into your existing management system. Both standards follow the same Annex SL structure. That shared backbone means you are not building a second management system from scratch. You are extending the one you already have.

As the EU AI Act begins its staged rollout, waiting and seeing is no longer a viable business strategy. For UK firms selling into Europe or using AI internally, the time to audit needs to be now. This checklist, informed by the ISO/IEC 42001 framework, provides a high level roadmap for your AI Governance and will enable you to get in an appropriate state of readiness ahead of the August 2026 deadline.

It’s a common misconception in 2026 that because we are post Brexit, the EU AI Act doesn't apply to the UK. In reality, if your AI system has an output used within the EU, or if you have a single customer in Paris or Berlin, you are likely within its extraterritorial reach. It’s a common misconception in 2026 that because we are post Brexit, the EU AI Act doesn't apply to the UK. In reality, if your AI system has an output used within the EU, or if you have a single custom