NEW ISO/IEC 42001 AI Management System readiness

Responsible AI,
governed with confidence

SCC helps organizations build AI capability, put practical AI governance in place, and achieve ISO/IEC 27001 and ISO/IEC 42001, so innovation and compliance move together.

AI Capacity DevelopmentAI GovernanceISO 27001 · ISO 42001
What we do

Three focused practices.
One trusted partner.

We combine people development, governance design and certification-grade management systems, so your AI programme is capable, accountable and secure.

01

AI Capacity Development

Build AI literacy and practical skills across leadership, teams, and governance roles.

  • Executive AI strategy & literacy briefings
  • Hands-on generative AI for productivity
  • AI risk, ethics & responsible use training
  • ISO 42001 implementer & internal auditor courses
See programmes
02

AI Governance Framework

Design and embed a governance model that makes AI accountable, transparent and well controlled.

  • AI policy, principles & roles (RACI)
  • AI inventory & use-case risk classification
  • AI risk & impact assessments
  • Alignment with EU AI Act & NIST AI RMF
See the framework
03

ISO 27001 & ISO 42001

Implement certification-ready ISMS and AIMS, standalone or as one integrated system.

  • Gap assessment & implementation roadmap
  • Policies, procedures & Statement of Applicability
  • Risk treatment & Annex A control design
  • Internal audit, management review & certification support
How it fits together
Integrated management systems

ISO 27001 + ISO 42001,
built as one system

Both standards share the ISO Harmonized Structure. We implement them together, with one risk process, one audit programme and one management review, to cut duplication and effort.

ISO/IEC27001

Information security (ISMS)

ISO/IEC42001

AI management (AIMS)

Shared clauses 4–10Harmonized Structure
4
Context of the organizationScope, interested parties, AI roles & information assets
5
LeadershipPolicies, commitment, roles & responsibilities
6
PlanningRisk assessment & treatment, AI system impact assessment, objectives
7
SupportResources, competence, awareness, documented information
8
OperationOperational controls across the AI system life cycle
9
Performance evaluationMonitoring, internal audit, management review
10
ImprovementNonconformity, corrective action, continual improvement
0

Annex A controls in ISO/IEC 27001:2022

0

Annex A controls in ISO/IEC 42001:2023

0

Shared management system clauses (4–10)

0

Integrated system, audit cycle & management review

AI capacity development

Upskill every layer of
your organization

Programmes tailored by audience, from the boardroom to the audit team, delivered in English or Arabic, onsite or online.

Leadership track

AI for Boards & Executives

Give decision-makers the understanding they need to set AI direction, risk appetite and oversight with confidence.

M1AI landscape, opportunities & limits
M2AI strategy & value cases
M3Regulatory outlook: EU AI Act & ISO 42001
M4Board oversight & AI risk appetite
Half-day briefingExecutive workshopOnsite / online
Workforce track

Practical AI for Teams

Hands-on training that lifts productivity while keeping data, IP and customers safe.

M1Generative AI fundamentals
M2Prompting & workflow design
M3Acceptable use & data protection
M4Use-case labs by department
1–2 day courseHands-on labsArabic / English
GRC track

AI Governance Officer Programme

Equip risk, compliance and legal teams to build and run an AI governance function.

M1AI governance models & roles
M2AI inventory & risk classification
M3AI risk & impact assessment
M4Policies, controls & monitoring
3-day programmeTemplates includedCase studies
Certification track

ISO 42001 & ISO 27001 Competence

Develop the in-house competence to implement, maintain and audit your management systems.

M1ISO 42001 implementation
M2ISO 27001:2022 implementation
M3Internal auditing (ISO 19011)
M4Integrated ISMS + AIMS
Awareness to practitionerExercises & exam prep
AI governance framework implementation

From principles to
controls that work

A layered governance model that turns responsible-AI intent into day-to-day decisions, controls and evidence.

Layer 1

Strategy & Principles

AI vision, risk appetite and responsible-AI principles approved by leadership.

Layer 2

Structure & Roles

AI committee, owners, RACI and escalation paths across the business.

Layer 3

Risk & Lifecycle Controls

Use-case intake, risk classification, impact assessment and lifecycle gates.

Layer 4

Monitoring & Assurance

KPIs, model monitoring, incident handling, audit and continual improvement.

Aligned with: ISO/IEC 42001EU AI ActNIST AI RMFISO/IEC 23894OECD AI Principles
Our approach

A clear path from
gap to certification

1

Assess

Gap assessment against ISO 27001 / 42001 and AI maturity baseline.

2

Design

Scope, governance model, risk methodology and roadmap.

3

Implement

Policies, controls, SoA and evidence built with your teams.

4

Empower

Targeted training so capability stays in-house.

5

Assure

Internal audit, management review and certification support.

Why SCC

Synergy between people, AI and compliance

Practical, not theoretical

Templates, tools and hands-on support that fit how your organization actually works.

Integrated by design

One management system for security and AI, with less paperwork and stronger evidence.

Capability that stays

We train your people as we implement, so you own and sustain the system.

Regional insight

Based in Lebanon, serving organizations across the Middle East in Arabic and English.

Let's talk

Ready to govern AI the right way?

Tell us where you are on your AI and compliance journey. We'll come back with a practical next step, whether that's a readiness assessment, a training plan or a certification roadmap.

www.sccconsultancy.com
Lebanon · Serving the Middle East
Thank you! We'll be in touch shortly.