AI governance starts with clear decisions.
Artificial intelligence may already influence customer support, fraud detection, scheduling, marketing, document review or clinical administration. Before considering certification or technical controls, an organisation needs to understand which AI systems it uses, why they are being used and who makes important decisions about them.
ISO/IEC 42001:2023 provides a management-system structure for establishing and reviewing those responsibilities. It brings together leadership, policy, planning, support, operational arrangements, performance evaluation and improvement. The standard applies to organisations that provide or use AI-based products or services.
The Foundation Course explains these connections through accessible organisational examples. Participants learn to distinguish an AI model from the processes that govern its use, and to recognise why an inventory, policy or risk register matters only when it reflects actual practice.
For example, a customer-service organisation introducing AI-assisted responses should be able to say which questions the tool is permitted to handle, when a human must intervene and how incorrect or unsuitable output is reported. A documented approval that nobody understands is weak control. Foundation study makes these decisions visible and shows how they connect to policy, competence, operational monitoring and continual improvement. The same questions can be adapted to other applications without pretending that all AI risks are identical.