ISO/IEC 42001:2023 Annex A Controls

It is for AI governance, compliance, risk and information security leads; people implementing an AI management system; internal auditors; and product and data teams that build or buy AI. Learners new to the subject may start with Sterling Academy's ISO/IEC 42001 Awareness course, and AI Risk & Impact Assessment covers the risk treatment that selects the controls.

The course starts with how Annex A works: how controls are selected through AI risk treatment (clause 6.1.3) and recorded in the Statement of Applicability. It then works through all 38 controls in the nine areas of Annex A, from AI policy to third-party and customer relationships: what each control requires, how to implement it with the Annex B guidance, real cases with dated sources, the evidence an auditor expects, and the risks of weak implementation.

ISO/IEC 42001:2023 Annex A Controls is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for ISO/IEC 42001:2023 Annex A Controls. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. The certificate states that the course covers 38 controls and lists the areas covered.

Yes. ISO/IEC 42001:2023 Annex A Controls is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

ISO/IEC 42001:2023 Annex A Controls has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators track their team's progress. Prices exclude taxes, and Sterling confirms final pricing.

No. The Certificate of Completion is a training certificate: it shows that one person completed ISO/IEC 42001:2023 Annex A Controls and reached the pass mark in its final exam. It is not certification of an organisation to ISO/IEC 42001, and Sterling does not certify organisations. An organisation is certified by an independent certification body after that body's own audit.

Annex A of ISO/IEC 42001:2023 lists 38 controls in nine areas, A.2 to A.10: policies related to AI, internal organization, resources for AI systems, assessing impacts of AI systems, the AI system life cycle, data for AI systems, information for interested parties, use of AI systems, and third-party and customer relationships. Annex B gives the implementation guidance for each control.