Produkt- och företagscertifiering Försäkran om överenskommelse

This document provides guidance on managing an information security management system (ISMS) audit programme, on conducting audits, and on the competence of ISMS auditors, in addition to the guidance contained in ISO 19011. This document is applicable to those needing to understand or conduct internal or external audits of an ISMS or to manage an ISMS audit programme.

This International Standard contains principles and requirements for the competence, consistency and impartiality of the certification of products (including services; see clause 3.3 of ISO/IEC 17000) and processes and for the bodies providing those activities. Certification bodies operating to this International Standard need not offer all types of product, service or process certification. 1.2 Certification of products, services and processes is a third party conformity assessment activity (see clause 5.5 of ISO/IEC 17000:2004). Bodies performing this activity are therefore third party conformity assessment bodies, (named in this standard "certification body/bodies").

Note 1 A certification body can be non-governmental or governmental (with or without regulatory authority).

Note 2 This International Standard can be used as a criteria document for accreditation or peer assessment or other assessment processes.

This document specifies additional requirements to ISO/IEC 17021-1. The requirements contained in this document, when implemented, support the demonstration of competence, consistency and reliability by the bodies performing auditing and certification of an artificial intelligence management system (AIMS) according to ISO/IEC 42001 for organizations that provide, develop or use AI systems. Certification of AIMS is a third-party conformity assessment activity (as described in ISO/IEC 17000:2020, 4.5), and bodies performing this activity are third-party conformity assessment bodies. This document also provides the necessary information and confidence to customers about the way certification has been granted. NOTE This document can be used as a criteria document for accreditation or peer assessment.