The first steps toward ISO/IEC 42001:2023 certification

Artificial intelligence (AI) is increasingly becoming a core technology across various industries, driving the need for safety, transparency, and risk control in its development. To meet this demand, ISO/IEC 42001:2023—the first international standard for AI management systems—was introduced. In pursuit of this standard, FSOFT is laying the foundation for a transparent AI system while reaffirming its position in the technology sector.

Issued in 2023 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), ISO/IEC 42001:2023 sets out requirements to help organizations and businesses deploy AI responsibly. This standard plays a crucial role in risk management, data protection, and ensuring operational transparency—key factors as AI becomes more prevalent in fields such as finance, healthcare, and manufacturing.

Achieving this certification not only enhances credibility and solidifies a pioneering position in AI but also helps businesses optimize development processes, improve security risk control, and minimize errors in AI models. More importantly, this certification unlocks opportunities for global partnerships, providing a competitive edge in the international market.

Recognizing the significance of this standard, FSOFT has proactively researched and is moving toward implementing ISO/IEC 42001:2023 in its AI development processes. Leading this effort are two pioneering units—the Risk Management and Compliance Assurance Office (COOF GRC) and the Software Engineering Process Group (SEPG)—which have been entrusted with spearheading the certification journey. The goal is not only to build a reliable AI system but also to position FSOFT among the top 1% of enterprises in Vietnam to achieve this certification.

Pioneering a new path always comes with challenges, and the road to ISO/IEC 42001:2023 is no exception. The lack of reference materials, limited resources, and the need to integrate the standard into existing software management processes are all challenges FSOFT must navigate. Currently, the project team, led by Nguyen Ba Hai (SEPG.PRO) and Nghiem Thi Tuyet Mai (COOF.GRC), with participation from QAI, AIC, PRC, IT, and iDO departments, is in the final stretch of selecting a suitable consulting partner while preparing for the official kick-off in April 2025.

Phương Thảo