ISO 27001 and ISO 42001: Building an Emergency ISMS and Governing AI Risk 

Organisations are increasingly under pressure to implement robust information security quickly, while also preparing for emerging expectations around AI governance and responsible use.  

ISO 27001 provides the foundation for an Information Security Management System (ISMS), while ISO 42001 introduces a structured approach to managing AI-related risks and responsibilities. Together, they represent a shift toward integrated governance across both information security and AI systems.  

What you’ll gain from watching this on-demand webinar:

Giles Hamlin, Head of Governance, Risk and Compliance at LRQA, and Amelia Hewitt, Managing Information Security Consultant at LRQA, explore how ISO 27001 and ISO 42001 can be applied in practice, both individually and as a combined governance approach. You will: 

• Build an understanding of how to establish a minimum viable ISO 27001 ISMS 
• Understand how ISO 42001 structures AI governance, accountability, and responsible use 
• See how AI risk fits into, and strengthens your existing information security framework 
• Identify where ISO 27001 and ISO 42001 overlap, and what that means in practice 
• Learn how to layer 42001 onto your ISMS to build an integrated management system ready for certification 

This session will provide practical, real-world guidance on how to rapidly establish an effective ISMS while also preparing for the growing importance of AI governance. You’ll leave with a clearer understanding of how ISO 27001 can be accelerated for immediate needs, and how ISO 42001 can be introduced as part of a longer-term, integrated management system strategy.