ISO 42001 Guide

ISO 42001 certification cost in 2026: for individuals and for organisations

Two different things share the name. Here is what a PECB ISO 42001 course and credential cost a person, and what decides an organisation's certification audit cost, with PECB's and the accreditation bodies' own sources linked.

Last reviewed: 26 October 2026

Looking for the price of every PECB course? See PECB course and exam prices.

← Back to the ISO 42001 guide

Lead Implementer (A$699 + GST) Lead Auditor (A$699 + GST) Foundation (A$279 + GST)

ISO 42001 training from A$279 + GSTexam voucher included

Enrol Talk to us

For individuals: what a PECB ISO 42001 course costs

ISO/IEC 42001 certification is for an organisation's AI management system, not for a person. What a person can hold is a credential about the standard, such as PECB's, and the usual route to it is a PECB course with the exam included. Mindset Cyber sells all three PECB ISO 42001 courses as PECB eLearning, at these prices:

PECB ISO 42001 course prices at Mindset Cyber in five currencies, with each course's PECB format and CPD credits
Course	Format and CPD	United States USD	Australia AUD	United Kingdom GBP	Eurozone EUR	New Zealand NZD
ISO 42001 Foundation	PECB eLearning 14 CPD credits	US$195	A$279 + GST A$306.90 inc. GST	£146 + VAT £175.20 inc. VAT	€174	NZ$341
ISO 42001 Lead Implementer	PECB eLearning 31 CPD credits	US$485	A$699 + GST A$768.90 inc. GST	£367 + VAT £440.40 inc. VAT	€427	NZ$863
ISO 42001 Lead Auditor	PECB eLearning 31 CPD credits	US$485	A$699 + GST A$768.90 inc. GST	£367 + VAT £440.40 inc. VAT	€427	NZ$863

Scroll the table sideways to see every currency.

Australian prices are shown before GST and UK prices before VAT, with the tax-inclusive amount underneath. Prices are set in each currency and do not change with the exchange rate. PECB sets the Foundation as a 2-day course and the Lead Implementer and Lead Auditor as 5-day courses. All three are PECB eLearning, studied at your own pace, and PECB's CPD Policy gives the Foundation 14 CPD credits and each Lead course 31.

Mindset Cyber is a PECB Authorised Titanium Partner, PECB's highest partner level.

What the course price includes

ISO 42001 Foundation: the PECB exam voucher, two exam attempts, the certification fee and 12 months of access.
ISO 42001 Lead Implementer and Lead Auditor: the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access.

There is no separate exam fee. PECB asks you to complete the cycle of exam attempts and certification application within 12 months of purchase, and to wait 15 days after a first attempt before you retake the exam. Only the Lead Implementer and Lead Auditor include a year of maintenance, because PECB charges no maintenance fee for the Foundation certificate. Training three or more people? See our team prices.

The exam, and taking it without a course

You sit the PECB exam online in the PECB Exams app, supervised remotely by a PECB invigilator. PECB's exam list and its 2026 candidate handbooks set the format:

Foundation: 1 hour, 40 multiple-choice questions, closed book.
Lead Implementer and Lead Auditor: 3 hours, 80 multiple-choice questions, open book. You may use a hard copy of ISO/IEC 42001, the course materials and your own notes from the course.

The pass mark for all three exams is 70%.

Sitting a Lead exam without a course

PECB also lets candidates sit the ISO/IEC 42001 Lead Implementer or Lead Auditor exam without taking a course. Its 2026 candidate handbooks for those two credentials price the exam at USD 1,000 and the certification application at USD 500. PECB's help centre says this route includes one exam attempt and no access to the official training materials.

Which credential you receive

The Foundation leads to the PECB Certificate Holder in ISO/IEC 42001 Foundation certificate, an entry-level credential with no experience requirement. Passing the Lead Implementer or Lead Auditor exam lets you apply for the PECB credential level your experience supports:

PECB Certified ISO/IEC 42001 credential levels open after the Lead Implementer or Lead Auditor exam, with PECB's experience requirements
PECB Certified ISO/IEC 42001 level	Professional experience	Of which in AI management	Project hours (Implementer) or audit hours (Auditor)
Provisional Implementer or Provisional Auditor	None	None	None
Implementer or Auditor	Two years	One year	200 hours
Lead Implementer or Lead Auditor	Five years	Two years	300 hours
Senior Lead Implementer or Senior Lead Auditor	Ten years	Seven years	1,000 hours

You apply in myPECB within 12 months of purchase, with two professional references, and sign the PECB Code of Ethics. PECB issues the Lead Implementer and Lead Auditor credentials under ISO/IEC 17024, the standard for bodies that certify people, and UKAS accredits PECB for both.

Keeping the credential

PECB certifications are valid for three years. To keep a Lead Implementer or Lead Auditor credential you log 90 CPD hours over each three-year cycle (60 at the Implementer or Auditor level and 180 at Senior Lead), pay PECB's Annual Maintenance Fee and keep to the PECB Code of Ethics. The first year of the fee is included in the Lead Implementer and Lead Auditor course price, and PECB's Certification Maintenance Policy sets the fee after that. The Foundation certificate and the Provisional level need no maintenance.

For organisations: what decides the audit cost

ISO does not certify organisations. An independent certification body audits the organisation's AI management system against ISO/IEC 42001 and issues the certificate, and the fee is whatever that certification body quotes, so this guide does not give a dollar range. A certification body accredited to ISO/IEC 17021-1 must plan the audit time with a documented procedure, and the standard lists factors it has to consider, including:

The standard and the management system

The requirements of ISO/IEC 42001, and how complex the organisation and its AI management system are.

Technology and regulation

The technological and regulatory context the organisation works in.

Sites

The size and number of sites, their locations and any multi-site arrangements.

Risk

The risks associated with the organisation's products, processes or activities.

Outsourcing

Any outsourced activities that fall within the scope of the AI management system.

Earlier and combined audits

The results of any earlier audits, and whether the audit is combined, joint or integrated.

Readiness matters too: stage 1 of the audit checks whether the organisation is ready for stage 2. Before any audit, the organisation has to establish and implement the AI management system that ISO/IEC 42001 specifies, and that internal work is a cost of its own. Our ISO 42001 controls list sets out the Annex A controls the standard provides.

The certification audit cycle

ISO/IEC 17021-1, the standard for bodies that audit and certify management systems, sets out the audit program: a two-stage initial audit, then a three-year certification cycle that begins with the certification decision:

Stage 1 audit

The certification body evaluates how ready the organisation is for stage 2.

Stage 2 audit

It evaluates whether the AI management system is implemented and effective. The certification decision follows.

First surveillance audit

In the first year after the certification decision, and no more than 12 months after it.

Second surveillance audit

In the second year after the certification decision.

Recertification audit

In the third year, before the certificate expires.

The first two audits lead to the certificate and the last three keep it, so plan for all five, not only the first.

How to check a certification body is accredited

Accreditation bodies assess ISO/IEC 42001 certification bodies against ISO/IEC 17021-1, with ISO/IEC 42006:2025, published in July 2025, adding the requirements specific to AI management systems. ISO points out that accreditation is not compulsory, but it gives independent confirmation of a certification body's competence. To check one:

Australia and New Zealand: JASANZ (the Joint Accreditation System of Australia and New Zealand, also written JAS-ANZ) accredits certification bodies for ISO/IEC 42001 under its Artificial Intelligence Management System Scheme, against ISO/IEC 17021-1 with ISO/IEC 42006. Accredited bodies are listed on the public JASANZ register.
United Kingdom: UKAS accredits certification bodies for ISO/IEC 42001 against ISO/IEC 17021-1 and ISO/IEC 42006:2025. It has concluded its pilot and lists the accredited bodies on its website. UKAS CertCheck verifies UKAS-accredited management system certificates.
United States: ANAB (the ANSI National Accreditation Board) accredits certification bodies for ISO/IEC 42001.
Any country: IAF CertSearch, the global database of accredited management system certifications, brings together data from accreditation bodies and certification bodies, so you can confirm certification and accreditation status in one place.

To check a certificate an organisation shows you, search IAF CertSearch, or ask the certification body or its accreditation body to confirm it.

Lead Implementer or Lead Auditor?

Both courses cost the same, A$699 + GST (A$768.90 inc. GST), and include the same things. The difference is the job each one prepares you for:

ISO 42001 Lead Implementer

Builds the AI management system

What PECB says it covers: planning, implementing, managing, monitoring, maintaining and continually improving an AI management system.
PECB's prerequisite: a general knowledge of AI management systems and ISO/IEC 42001.
Exam: 3 hours, 80 multiple-choice questions across six domains, open book.
Leads to: PECB Certified ISO/IEC 42001 Lead Implementer, or the level your experience supports.

See the Lead Implementer course

ISO 42001 Lead Auditor

Audits the AI management system

What PECB says it covers: planning, conducting and closing ISO/IEC 42001 audits in line with ISO/IEC 17021-1 and ISO 19011, and managing an audit program.
PECB's prerequisite: a fundamental understanding of ISO/IEC 42001 and AI principles and concepts.
Exam: 3 hours, 80 multiple-choice questions across seven domains, open book.
Leads to: PECB Certified ISO/IEC 42001 Lead Auditor, or the level your experience supports.

See the Lead Auditor course

New to the standard? The ISO 42001 Foundation has no prerequisites, covers the fundamental principles and concepts of an AI management system and leads to the PECB Certificate Holder in ISO/IEC 42001 Foundation certificate.

Step by step, with the credential levels and the experience each one needs: how to become an ISO 42001 Lead Implementer and how to become an ISO 42001 Lead Auditor.

Related guides

ISO 42001 guide: what the standard covers and how certification works.
ISO 42001 training: the three PECB ISO 42001 courses and which to take first.
AI governance certification: the PECB AI courses, compared by what you want to do.
ISO 42001 controls list: the Annex A controls, one by one.
PECB course and exam prices: the price of every PECB course we sell.
PECB eLearning vs Self-Study: what each PECB format includes.

Frequently Asked Questions

Common questions about what ISO 42001 certification costs.

How much does ISO 42001 certification cost?

It depends which certification you mean. For a person, it is the price of a PECB course with the exam included: the ISO 42001 Foundation is US$195 in the United States, A$279 + GST (A$306.90 including GST) in Australia and £146 + VAT (£175.20 including VAT) in the UK, and the Lead Implementer or Lead Auditor is US$485 in the United States, A$699 + GST (A$768.90 including GST) in Australia and £367 + VAT (£440.40 including VAT) in the UK. Each price includes the PECB exam voucher, two exam attempts and the certification fee. For an organisation, the certification body it chooses quotes the audit fee. If that body is accredited, ISO/IEC 17021-1 requires it to consider factors such as the complexity of the organisation and its AI management system, its sites and the risks of its activities when it plans the audit time, and the organisation also carries the internal cost of building its AI management system. After certification there is a surveillance audit in each of the next two years and a recertification audit in the third.

Is the exam included?

Yes. Every PECB ISO 42001 course Mindset Cyber sells includes the PECB exam voucher and two exam attempts, so there is no separate exam fee. PECB's exam rules say that for a course delivered by a PECB Partner, the training fee includes the first exam attempt, one retake, the certification application fee and the first year of the Annual Maintenance Fee. The Foundation certificate has no maintenance fee, so there is none to include in that price. You sit the exam online in the PECB Exams app, supervised remotely by a PECB invigilator. The Foundation exam has 40 multiple-choice questions in 1 hour, closed book; the Lead Implementer and Lead Auditor exams have 80 multiple-choice questions in 3 hours, open book; all three have a 70% pass mark. Without a course, PECB's 2026 candidate handbooks price the Lead Implementer or Lead Auditor exam at USD 1,000 and the certification application at USD 500, and PECB's help centre says that route includes one exam attempt and no course materials.

Can an individual be ISO 42001 certified?

Not to ISO/IEC 42001 itself: certification to the standard is for an organisation's AI management system. A person can hold a PECB credential about the standard, such as PECB Certified ISO/IEC 42001 Lead Implementer or PECB Certified ISO/IEC 42001 Lead Auditor. PECB issues both under ISO/IEC 17024, the standard for bodies that certify people, and UKAS accredits PECB for them. You earn one by passing the PECB exam and applying for the level your experience supports, from Provisional (no experience needed) to Senior Lead. The ISO 42001 Foundation leads to a certificate instead: PECB Certificate Holder in ISO/IEC 42001 Foundation, an entry-level credential with no experience requirement.

How long does ISO 42001 certification take for an organisation?

There is no standard timeframe: it depends on how much of the AI management system is in place before the audit starts. The certification audit has two stages, and stage 1 checks whether the organisation is ready for stage 2. Once certified, the certificate runs on a three-year cycle that begins with the certification decision, with a surveillance audit in each of the next two years (the first within 12 months of the decision) and a recertification audit in the third year, before the certificate expires.

Which ISO 42001 course should I take?

Take the Lead Implementer if you will plan, implement, manage, monitor, maintain and continually improve an AI management system, and the Lead Auditor if you will audit one, planning, conducting and closing ISO/IEC 42001 audits in line with ISO/IEC 17021-1 and ISO 19011. Both cost the same and include the same things. PECB asks Lead Implementer candidates for a general knowledge of AI management systems and ISO/IEC 42001, and Lead Auditor candidates for a fundamental understanding of ISO/IEC 42001 and AI principles and concepts. If you are new to the standard, the ISO 42001 Foundation has no prerequisites.

Sources

Every source was checked on 25 and 26 October 2026.

Ready to choose your ISO 42001 course?

Each course page shows the price in your currency, the exam details and what the course covers. If you have a question about the courses or the exam, get in touch.

View the Lead Implementer course Talk to us

★ 4.5/5 from 18 reviews on Trustpilot (October 2026) PECB Authorised Titanium Partner Exam voucher + 2 attempts included