Requirements for Bodies Providing STAR for AI Certification
Released: 03/05/2026
This document defines the requirements that certification bodies must meet to conduct STAR for AI certification assessments aligned with the AI Controls Matrix (AICM) as part of an ISO/IEC 27001 and/or ISO/IEC 42001 assessment. The STAR for AI certification process is designed to supplement existing ISO/IEC certification processes and extend them to address AI-specific governance, lifecycle risks, and assurance requirements.
This document:
- Outlines the requirements certification bodies (CBs) must meet to conduct a STAR for AI certification assessment aligned with the AICM as part of an ISO/IEC 27001 and/or ISO/IEC 42001 audit.
- Describes the additional AI governance, lifecycle, and risk management controls in the AICM that extend traditional cloud security assurance into artificial intelligence environments.
- Should be considered supplementary to ISO/IEC 27006-1 and ISO/IEC 42006 and outlines the additional requirements for assessing the AICM as part of the STAR for AI certification program.
Topics:
Download this Resource
Prefer to access this resource without an account? Download it now.
