Services · ISO/IEC 42001 Audit
ISO/IEC 42001 Audit
ISO/IEC 42001 audit services led by PECB-certified lead auditors: readiness assessment, internal audit, and certification audit support.
The standard
What ISO/IEC 42001 is
ISO/IEC 42001, published in December 2023, is the first certifiable international standard for AI management systems. Like ISO/IEC 27001 for information security, it defines the requirements an organization's AI management system must meet, clause by clause plus the Annex A controls, and an accredited certification body audits against them. Certification is how an organization demonstrates to customers, partners, and regulators that its AI governance is real, not aspirational.
Certified lead auditors
ISO/IEC 42001 Audit Services
Both Fire Mountain Labs founders are PECB-certified ISO/IEC 42001 Lead Auditors
We take your AI management system from first gap analysis to certification-ready: pre-audit and internal audit services, leading up to the certification audit.
Readiness (pre-audit) assessment
Clause-by-clause gap assessment of your AIMS against ISO/IEC 42001, including Annex A controls, with a prioritized remediation plan.
Internal audit
The standard requires internal audits before certification. We run them as certified lead auditors: audit plan, evidence sampling, and findings written the way your certifier expects.
Certification audit support
Certification-body selection, Stage 1/Stage 2 preparation, and support responding to findings through your certification decision.
Certification itself must come from an independent accredited body. Our role ends exactly where the certifier's begins, which is what keeps your internal audit credible.
For small and mid-size companies
One partner from gap analysis to certification day
The standard requires internal audits before certification, and in a smaller company there is rarely anyone who can run one at arm's length from the work being audited. That is the gap we fill: we run your internal audit as certified lead auditors, and then we remediate the findings with you rather than leaving you a report and a to-do list.
Because certification always comes from a separate accredited body, one partner can do both without compromising the independence of your certification. You arrive at Stage 1 with the gap analysis done, the findings closed, and an internal audit on file written the way your certifier expects.
For certification bodies
A readiness partner for the clients you cannot consult for
Accreditation impartiality rules mean a certification body cannot consult on a management system it certifies. When a client comes to you before they are ready, we take the readiness side: gap assessment, remediation, and the internal audit, and hand them back to you audit-ready.
We do not certify, and we do not compete with you for that work. Our role ends exactly where yours begins.
Arrive at the certification audit with no surprises.
Book a consultation