“Businesses need to be sure that when their AI management system is being assessed, it is being done in a robust, coherent and consistent manner,” said Mark Thirwell, British Standards Institute.
New guidance has been created by the British Standards Institute (BSI) to support the growing AI audit market and ensure businesses can have confidence in those assessing their AI frameworks.
Having previously published the first AI management standard in late 2023, the UK’s national standards body has now produced what it claims is the world’s first international standard designed specifically for certifying bodies that independently audit AI management systems.
Due to be published on 31st July, Requirements for Bodies Providing Audit and Certification of Artificial Intelligence Management Systems (BS ISO/IEC 42006:2025), is designed to avoid a ‘wild west’ of unchecked vendors by allowing regulators, customers, and investors to identify credible AI governance providers.
BSI said that the new standard is a tool to help organisations aiming to be certified under the earlier AI management standard work with accredited auditors who meet consistent, rigorous competency benchmarks.
Diverging approaches to AI regulations in other countries mean that AI assurance is increasingly recognised as critical to responsible adoption, with leading accountancy firms, including the Big Four, understood to be following in BSI’s footsteps and launching AI auditing programmes, according to the Financial Times.
However, according to BSI, to operate effectively, certification bodies will need standardised methodologies to assess AI systems effectively across various jurisdictions.
Unlike broader AI governance frameworks, BS ISO/IEC 42006 is dedicated to AI system certification, rather than the AI systems themselves.
BSI said that the standard establishes resilient governance mechanisms for auditors assessing compliance with the AI management standard. This added layer of verification is designed to build trust in AI governance certifications and make sure all certifying bodies can follow consistent guidelines.
Although hundreds of firms in the UK offer AI assurance services, many are provided by AI developers, raising concerns around the independence and rigour of assessments. Targeting that shortage of qualified, independent auditors in the AI market, BSI hopes that the new standard can meet an urgent demand.
The standard is already being used by accreditation bodies and assessors to support credible AI assurance practices, which BSI hopes will continue as firms try to meet compliance under shifting global regulations.
“Businesses need to be sure that when their AI management system is being assessed, it is being done in a robust, coherent and consistent manner. Only this will build much-needed confidence in a safe, secure AI ecosystem,” said Mark Thirwell, global digital director at BSI.
“The new guidance, BS ISO/IEC 42006 represents a crucial milestone in global AI accountability, by setting clear certification requirements.
“This standard will enable regulators, customers, and investors to differentiate credible AI governance implementations from unchecked claims, supporting responsible AI innovation and paving the way for AI to be a force for good.”
