The infrastructure side of ISO 42001: open-source tools that keep AI governance evidence, building on AWS or Microsoft AI services and using their certificates, and AI security testing as evidence.
Which open-source tools help produce ISO 42001 evidence: LLM tracing and evaluation, model vulnerability scanning, prompt and output screening, and GRC tracking with an ISO 42001 library, with their licenses, edition limits and maintenance status.
Building AI systems on AWS under ISO 42001: who certified AWS and under which accreditation, getting the certificate and in-scope services from AWS Artifact, why you are not certified by association, and the supplier and responsibility controls you still own.
Using Microsoft AI services under ISO 42001: which Copilot, Foundry and Security Copilot services are in scope, audit reports on the Service Trust Portal, the Purview Compliance Manager template, transparency documentation, and the assessment work that stays with you.
How AI red teaming, model scanning and security testing provide evidence for ISO 42001 verification and validation, monitoring and event logging controls, how ISO/IEC 27090 frames the threats, and how results feed risk treatment and management review.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.