Download the certification brochure (Spanish): Click here

Exam Details

• Exam Name: ISO/IEC 42001:2023 Internal Auditor Certified (42001-IAE)
• Exam Format: Multiple choice, online with remote supervision (proctoring)
• Exam Delivery: Safe Exam Browser
• Number of Questions: 50 questions: 70% scenarios / 30% conceptual
• Exam Duration: 90 minutes
• Passing Score: 70% (35 out of 50 correct answers)
• Available Languages: Spanish / English
• Attempts: Maximum 2 attempts (minimum 15 days between attempts)
• Validity: 3 years · 15 CPD credits per year

Main Subjects

• Audit fundamentals and AI management principles (10%): ISO 19011 auditing principles; High-level structure and PDCA cycle; Internal, external and certification audits; Criterion, evidence, finding, nonconformity and observation.
• AIMS audit planning and preparation (20%): Risk-based annual program; Scope, criteria and objectives; Independent and competent audit team; Review of the AI policy, the SoA and the Impact Assessment; Checklists and audit plan.
• Conducting the audit: clauses 4 to 10 (30%): Context and leadership; Planning: AI risks and impact; Support and operation, including AI suppliers; Performance evaluation and improvement; Interviews, sampling, document tracing and difficult situations.
• Evaluating AI controls: Annexes A, B, C and D (20%): The 38 Annex A controls in 9 control objectives; Implementation according to Annex B; AI objectives (Annex C) and sector suitability (Annex D); Auditing the Statement of Applicability.
• Audit communication, reporting and follow-up (10%): Writing and classifying findings; Final audit report; Closing meeting with management; Effectiveness of corrective actions.
• Integrated auditing and regulatory context (10%): Integration with ISO/IEC 27001, ISO 9001, ISO 22301 and ISO/IEC 27701; EU AI Act, GDPR and national AI frameworks; Relationship with the NIST AI RMF; Regulated sectors: healthcare, finance and automotive.

Who is this certification for?

• Management system internal auditors: Who want to extend their competence to AI governance.
• Compliance, privacy and risk officers: Who must verify regulatory compliance and risk management of AI systems.
• Certified ISO/IEC 42001 implementers: Who want to take the next step on the path toward auditing.
• Quality, security and data leads: Who integrate AI auditing into their internal audit program.

Prerequisites

Mandatory: ISO/IEC 42001:2023 Implementer Certified (42001-IC). The internal auditor needs to master the requirements they will audit. Next level: ISO/IEC 42001:2023 Lead Auditor Certified (42001-LA).