Role
Certification body assessor
Auditing somebody else’s management system, under requirements that decide whether your certificate means anything.
§ 1 — What you carry
Where the duty attaches
A certificate is worth what the competence and impartiality requirements behind it are worth, and those requirements bind the body issuing it. They govern audit time, the competence of the team, and the independence of the decision from the relationship that pays for it.
The notified body sits in the same position under a different regime and carries its own exposure: a conformity assessment body designated under the Act is itself subject to obligations for how it assesses, and to consequences for failing them.
Also written as lead auditor, management system auditor, notified body assessor. Everything below is drawn from the obligation dataset by the capacity that binds this role, not by job title — 4 provisions across 2 collections.
§ 2 — The obligations
What binds you
Auditing AI systems
3 provisions
- Annex VII, points 4.3 to 4.5 — Conformity based on an assessment of the quality management system and an assessment of the technical documentation
- ISO 19011:2026 clause 7 · ISO/IEC 42006:2025 clause 7.1 — Competence and evaluation of auditors · Competence of personnel
- ISO/IEC 42006:2025 — Information technology. Artificial intelligence. Requirements for bodies providing audit and certification of artificial intelligence management systems
ISO/IEC 42001
One provision
§ 3 — Evidence
The artefacts this role owns
Drawn from the evidence column of the provisions above, most widely demanded first. These are what an assessor asks this role to produce.
- 1xA competence determination made before people are assigned
- 1xA competence file per role, under 7.1
- 1xA per-client justification of the audit time planned
- 1xA reassessment interval with evidence it was applied
- 1xAn effectiveness evaluation for every action taken to close a gap
- 1xContinuing development in AI method rather than AI awareness
- 1xEvaluation records under 7.5, one per auditor on the engagement
- 1xExternal auditor and technical expert engagement records, under 7.3
- 1xFurther-evidence requests under 4.4, and the responses
- 1xOutsourcing agreements under 7.5, and what they cover
- 1xPer-person evidence against the stated criteria
- 1xThe body’s own test record, and why the provider’s tests were not accepted
§ 4 — Ahead
What lands next
2 December 2027
2 August 2028
Certification
Assessed on the same standard of evidence
Every Council credential is examined on applied judgement against a published anchor, set out the way the obligations on this page are. The Certified Applied AI Associate, the Council’s flagship, is open to any adult today, its fee waived by a coupon code from the AI-Readiness Check, and the register lists what is open for enrolment.