orbit by reconn.
Insights around Applied AI, AI Governance, AI Security and everything around it
AI governance insights for ISO/IEC 42001, the EU AI Act and the NIST AI RMF
AI governance is the set of policies, roles, controls and oversight an organization uses to build, buy and run AI responsibly. This blog explains how ISO/IEC 42001, the EU AI Act and the NIST AI RMF fit together, written by PECB Certified Trainer Shenoy and sourced from standards bodies and regulators.
Every great mission starts with reconn.
What this blog covers
Three sources sit behind most AI governance work. Each one links to the official text, so you can check every claim.
ISO/IEC 42001
The international standard for an AI management system (AIMS). Learn what its clauses require, how an AIMS is built and how certification audits work.
EU AI Act
Regulation (EU) 2024/1689. Understand the risk categories and the duties of providers and deployers, and how a management system standard supports legal compliance without replacing it.
NIST AI RMF
A voluntary framework from the US National Institute of Standards and Technology for managing AI risk, organized around the Govern, Map, Measure and Manage functions.
All AI Governance articles
Every post in this blog, newest first..
AI governance questions, answered
What is AI governance?
AI governance is the set of policies, roles, controls and oversight an organization uses to develop, buy and run AI systems responsibly. It covers accountability, risk management, transparency, data quality and compliance with laws such as the EU AI Act.
What is ISO/IEC 42001?
ISO/IEC 42001 is the international standard for an AI management system (AIMS). It sets requirements for establishing, implementing, maintaining and continually improving AI governance in an organization, and organizations can be certified against it by an accredited certification body.
Does ISO/IEC 42001 certification make an organization compliant with the EU AI Act?
No. ISO/IEC 42001 is a voluntary management system standard and is not a harmonized standard under the EU AI Act, so a certificate does not confer legal compliance. It can support compliance work with structured governance, risk and documentation practices.
What is the NIST AI Risk Management Framework?
The NIST AI RMF is a voluntary framework from the US National Institute of Standards and Technology for managing AI risk. It is organized around four functions, Govern, Map, Measure and Manage, and is supported by the NIST AI RMF Playbook.
Which PECB course fits my role?
ISO/IEC 42001 Lead Implementer suits people who build and run an AI management system, and Lead Auditor suits people who audit one. PECB EU AI Governance Professional focuses on the EU AI Act. PECB sets and proctors every exam.
Who writes the AI Governance articles?
Shenoy, founder of reconn, writes them. He is a PECB Certified Trainer, a Certified Artificial Intelligence Professional (CAIP) and holds the ISO/IEC 42001 Senior Lead Implementer credential. Articles cite standards bodies, regulators and governments.
Last updated
Build AI governance skills with a PECB Authorized Titanium Partner
reconn is a PECB Authorized Titanium Partner. Pick the course that matches your role, or ask a PECB Certified Trainer which format fits.
ISO/IEC 42001 Lead Implementer
Learn to plan, build and run an AI management system. eLearning with a 1-hour 1-on-1 session with a PECB Certified Trainer.
Explore ISO 42001 Lead ImplementerISO/IEC 42001 Lead Auditor
Learn to audit an AI management system against ISO/IEC 42001. eLearning with a 1-hour 1-on-1 session with a PECB Certified Trainer.
Explore ISO 42001 Lead AuditorPECB EU AI Governance Professional
A PECB course on governing AI under the EU AI Act. Self-study, with a 1-hour session with a PECB Certified Trainer.
Explore EU AI Governance ProfessionalISO 42001 implementation services
Hands-on help from reconn practitioners to implement ISO/IEC 42001 and prepare for certification.
Explore ISO 42001 implementationEvery enrollment includes email and WhatsApp support until you clear the exam, within 12 months of enrollment.