What the Institute does

The 42001 Institute is an independent advisory practice focused on making ISO/IEC 42001 implementable. Not summarising it, not repositioning existing risk frameworks under its name — implementing it, all the way through to certification.

That work runs across four modes:

  • Certification readiness — gap assessment against the standard, remediation plan, mock Stage 1 and Stage 2 audits, and coaching through the real audit with the chosen certification body.
  • Internal audit programmes — designing the audit function that will keep the AI management system honest between external audits.
  • Executive advisory — board briefings, C-suite framing, and policy work translating what the standard requires into decisions the leadership team actually has to make.
  • Training — the curriculum branch. Structured programmes on 42001 for auditors, implementers, and executives, delivered in-person, in-house, and in collaboration with established training providers.

Who it serves

The typical engagement is with an organisation that has already recognised AI governance is not optional and is now trying to work out what "doing it properly" looks like. That includes:

  • Governments and public authorities — usually the AI unit, the innovation office, or the internal audit function.
  • Enterprise boards — where AI oversight has moved from an IT question to a fiduciary question.
  • Financial services, healthcare, and critical infrastructure — sectors where the regulator is already asking the question, or is about to.

The Institute operates out of Dubai and works predominantly across the GCC and EMEA, with international engagements where the standard is the connective tissue.

What makes it different

Two things.

First, the Institute is led by a serving U.S. delegate to ISO/IEC SC 42 — the committee that drafts the standard. That gives every reading of the standard the grounding of the drafting intent, not just the published language.

Second, the Institute’s founder is the author of the standard’s certification guide — AI Management System Certification According to the ISO/IEC 42001 Standard (Routledge, 2024). The advisory practice and the reference text are the same body of work.

How engagements start

Every engagement starts the same way: a short conversation to test fit. If the Institute is the right partner, we scope. If it is not, we say so and — where possible — point to who is.

Reach out via LinkedIn. Response within 48 hours.