Insight Assurance

In June 2026, the EU Council pushed back the AI Act's high-risk compliance deadline — but customers and regulators are still asking for AI governance evidence now. This session gives you a clear, vendor-neutral walkthrough of ISO/IEC 42001: what it is, who it applies to, and what happens during an independent assessment.

● Did the EU AI Act deadline actually move? Yes — the compliance deadline for high-risk systems shifted from August 2026 to December 2027 (standalone) / August 2028 (embedded systems). We'll cover what that means, and what hasn't changed.

● Do we actually need ISO 42001? Applicability depends on whether your organization builds, provides, or uses AI systems — we'll walk through how scope is determined.

● How does ISO 42001 relate to ISO 27001 or SOC 2? We'll cover where the frameworks share ground and where ISO 42001 adds AI-specific requirements.

● What does an assessment actually evaluate? From Stage 1 documentation review through Stage 2 evidence testing and the ongoing 3-year certification cycle.

● What's the difference between getting “audit-ready” and being assessed? Workstreet and Insight Assurance sit on either side of that line — we'll explain both.

Can't make it live? Register anyway and we'll send you the replay.

### **Who should attend**

Security leaders, compliance managers, and risk professionals at organizations that hold or are pursuing ISO 42001 certification and are beginning to evaluate AI governance.
