ISO/IEC and CEN/CENELEC standards
-

ISO 19011:2026, the art of auditing updates: hybrid audits, digital evidence and auditor competence
In May 2026 the fourth edition of ISO 19011 was published, the international guidance for auditing management systems, transposed as UNI CEI EN ISO 19011 and entering the national body of standards on 27 May 2026. Remote and hybrid audits treated as ordinary modes, digital evidence alongside interviews and direct observation, vocabulary aligned with the…
-

UNI 11621-8: the twelve professional profiles of Artificial Intelligence, between national standard and European CWA
On 30 April 2026 the standard UNI 11621-8 was published, the first national standard in Europe to systematically define the professional role profiles of Artificial Intelligence: twelve figures, from Chief AI Officer to AI Research Scientist, certifiable under accreditation. A few weeks later came CEN’s CWA 18398 on AI professional and educational profiles. Two documents…
-

The AI ethicist becomes a profession: the EN 18274 standard and the competences required
For years the “AI ethicist” was a self-attributed title, without verifiable contours. Now the picture changes: within CEN-CLC/JTC 21, EN 18274 — the European standard on competence requirements for professional AI ethicists — is on the home straight, while professional associations such as the Association of AI Ethicists work towards recognition of the profession. Who…
-

ISO/IEC 42005 and the impact assessment of AI systems: a compass between FRIA and DPIA
Published in May 2025, ISO/IEC 42005 offers organisations guidance for assessing the impact of AI systems on individuals, groups and society. A voluntary tool that sits in an ecosystem crowded with mandatory assessments: the FRIA of Article 27 of the AI Act and the DPIA of Article 35 of the GDPR. How do these three…
-

EN 18286: the quality-management system for Article 17 of the AI Act nears publication
It is the most awaited European standard of the AI Act construction site: EN 18286 on the quality-management system for the Regulation’s regulatory purposes. Public enquiry closed, formal vote concluded in June 2026, publication imminent. But for the presumption of conformity a further step will still be needed: citation in the Official Journal of the…
-

ISO 45001 and climate change: when occupational health and safety meets the climate
With Amendment 1:2024 “Climate action changes”, climate change entered ISO 45001 expressly — the standard on occupational health and safety management systems, transposed in Italy as UNI EN ISO 45001:2023+A1 in October 2024. And with Accredia Technical Circular 24/2026 the conformity of work equipment became a condition for issuing and maintaining certificates. What does this…
-

ISO 14001:2026, environmental management steps up: what certified organisations need to know
In April 2026 the new edition of ISO 14001 was published, the world’s reference standard for environmental management systems, transposed in Italian as UNI EN ISO 14001 (April 2026 edition), replacing the 2015 version as integrated by the 2024 climate Amendment. Not a revolution, but a targeted update: life cycle, climate, leadership and transparency. And…
-

Certifying Artificial Intelligence: how an AIMS scheme works and what it does not promise
With ISO/IEC 42001 came the first certifiable standard on Artificial Intelligence management systems; with ISO/IEC 42006:2025 came the requirements for the bodies issuing the certifications. But how does an AIMS scheme actually work? And why is the certificate not — and cannot be — a “conformity licence” for the AI Act? The distinction between the…
-

ISO/IEC 42001 and the AI Act: why certification is not (yet) a presumption of conformity
On 18 March 2026 EN ISO/IEC 42001:2026 was published, the European adoption of the standard on Artificial Intelligence management systems, while the work of CEN-CLC/JTC 21 on harmonised standards supporting the AI Act proceeds rapidly. But beware of confusing the levels: the AIMS of ISO/IEC 42001 is not the quality-management system required by Article 17…
-

eIDAS 2 Regulation and NIS2 Directive: an integrated framework hard to implement
From the Law & Technology review · agendadigitale.eu.