The British Standards Institute (BSI) has published the world’s first international standard for how audit bodies must operate when certifying AI management systems, establishing a new global benchmark for the ethical and accountable deployment of AI systems. The announcement comes amid growing concerns about unchecked AI adoption and rising calls for government oversight.
Mark Thirlwell, Global Digital Director, BSI said:
“As companies race to provide AI audit services, there is a risk of a ‘wild west’ of unchecked providers and the potential for radically different levels of assessment. Businesses need to be sure that when their AI management system is being assessed, it is being done in a robust, coherent and consistent manner. Only this will build much-needed confidence in a safe, secure AI ecosystem. The new guidance, BS ISO/IEC 42006 represents a crucial milestone in global AI accountability, by setting clear certification requirements. This standard will enable regulators, customers, and investors to differentiate credible AI governance implementations from unchecked claims, supporting responsible AI innovation and paving the way for AI to be a force for good.”
BSI convened UK experts who contributed to the development of BS ISO/IEC 42006. The standard has been, and will continue to be, referenced by accreditation bodies and conformity assessment organizations to support trustworthy AI assurance practices, helping ensure compliance with evolving global regulatory frameworks.
The standard should enable regulators, customers, and investors to differentiate credible AI governance implementations from unchecked claims, supporting responsible AI innovation and paving the way for AI to be a force for good.”
Industry Reaction
Arkadiy Ukolov, Co-Founder and CEO at Ulla Technology Ltd, comments:
“The UK is crying out for AI oversight from government and the regulators to combat the AI wild west that is taking over the business world. Too often, staff are sharing unauthorised data on third-party AI systems, which breaches privacy and compliance protocols, exposing confidential information. For AI to be truly fit for purpose, it must be built on privacy-first foundations, where data remains under the user’s control and is processed securely within an enclosed environment. This must be supported by robust governance frameworks to ensure ethical and safe AI usage, protecting data at all stages.”
As generative AI becomes embedded in day-to-day operations, organisations are being urged to proactively assess the AI tools they use, not just for performance, but for auditability, data governance, and long-term accountability, leaving a clear message from regulators that AI oversight isn’t optional; it’s the new baseline.
