{"id":959,"date":"2026-07-28T11:48:04","date_gmt":"2026-07-28T11:48:04","guid":{"rendered":"https:\/\/i2sc.es\/?p=959"},"modified":"2026-07-29T07:47:47","modified_gmt":"2026-07-29T07:47:47","slug":"iso-iec-42001-y-en-18286-por-que-existen-dos-normas-tan-parecidas","status":"publish","type":"post","link":"https:\/\/i2sc.es\/en\/blog\/iso-iec-42001-y-en-18286-por-que-existen-dos-normas-tan-parecidas\/","title":{"rendered":"ISO\/IEC 42001 and EN 18286: why are there two such similar standards?"},"content":{"rendered":"<p class=\"wp-block-paragraph translation-block\">The European landscape for artificial intelligence standardisation is at a particularly significant juncture. Following the publication of <a href=\"https:\/\/www.iso.org\/es\/norma\/42001\" data-type=\"link\" data-id=\"https:\/\/www.iso.org\/es\/norma\/42001\" target=\"_blank\" rel=\"noreferrer noopener\">ISO\/IEC 42001<\/a> as the first international standard for artificial intelligence management systems, <a href=\"https:\/\/i2sc.es\/en\/blog\/normas-cen-cenelec-para-el-gobierno-gestion-y-calidad-de-los-sistemas-de-ia\/\" data-type=\"post\" data-id=\"927\" target=\"_blank\" rel=\"noreferrer noopener\">CEN\/CENELEC<\/a> has published <a href=\"https:\/\/standards.cencenelec.eu\/ords\/f?p=205:110::::: FSP_PROJECT,FSP_LANG_ID:80556,25&amp;cs=175392A97352F2C5B1211EEC4FA215C15\" data-type=\"link\" data-id=\"https:\/\/standards.cencenelec.eu\/ords\/f?p=205:110:: :::FSP_PROJECT,FSP_LANG_ID:80556,25&amp;cs=175392A97352F2C5B1211EEC4FA215C15\" target=\"_blank\" rel=\"noreferrer noopener\">EN 18286<\/a> as a European standard aimed at quality management systems for regulatory purposes relating to the <a href=\"https:\/\/www.consilium.europa.eu\/es\/policies\/artificial-intelligence-act\/\" target=\"_blank\" rel=\"noreferrer noopener\">European Artificial Intelligence Regulation<\/a>. Its publication makes the relationship between the two standards a particularly important issue for suppliers, auditors, consultants and organisations that develop, market or use AI systems in the European market. In this context, an inevitable question arises: why do we need two standards that, on the face of it, describe such similar management systems?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is a reasonable question. One need only compare the structure of ISO\/IEC 42001 with that of EN 18286 to see that both share the main components of a management system: context, leadership, planning, support, operation, performance evaluation and continuous improvement. However, this similarity does not imply that one of the standards is redundant. On the contrary, it reflects a deliberate strategy: to build on an already established management framework and tailor it to meet the regulatory requirements of the AI Act.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The key idea<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ISO\/IEC 42001 and EN 18286 do not address radically different questions; they address the same issue from two complementary perspectives:<\/p>\n\n\n\n<ul style=\"padding-right:25px;padding-left:25px\" class=\"wp-block-list\">\n<li class=\"translation-block\"><strong>ISO\/IEC 42001:<\/strong> How should an organisation manage artificial intelligence effectively, responsibly and reliably?<\/li>\n\n\n\n<li class=\"translation-block\"><strong>EN 18286:<\/strong> How should an organisation manage artificial intelligence to provide evidence of compliance with the applicable requirements of the European AI Regulation?<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Therefore, the main difference lies not in the structure of the management system, but in its purpose. ISO\/IEC 42001 provides an international framework for implementing an artificial intelligence management system, whilst EN 18286 tailors that system to serve as a tool for regulatory compliance within the European context.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Understanding both standards<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>What do they manage?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">Both standards define an <strong>Artificial Intelligence Management System<\/strong> based on the cycle of continuous improvement and on the common framework used by ISO management system standards. However, the emphasis differs. ISO\/IEC 42001 aims to implement an artificial intelligence management system that enables the planning, operation, evaluation and continuous improvement of the use of AI within the organisation, whilst EN 18286 takes that same management system and adds the requirements and evidence necessary to support the demonstration of compliance with the AI Act. Both standards use a very similar management framework, but differ in their scope, the organisations they are aimed at, and the type of evidence they require to demonstrate regulatory compliance.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Who should use them?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Both standards are aimed at organisations that develop, acquire, integrate or use artificial intelligence systems. The difference lies in the context of application.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ISO\/IEC 42001 can be implemented in any organisation worldwide, regardless of sector or the level of risk associated with its AI systems. By contrast, the forthcoming EN 18286 is specifically aimed at suppliers and other organisations that are required to demonstrate compliance with regulatory obligations applicable to certain AI systems, particularly those classified as high-risk.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><em>Rather than simply changing the recipient, the European regulation imposes new obligations on certain stakeholders within the ecosystem.<\/em><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>When should they be implemented?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Both standards cover the AI system throughout its entire life cycle, as they both address planning, development, operation, monitoring, evaluation and continuous improvement. However, EN 18286 incorporates additional controls relating to specific stages of the regulatory cycle, such as conformity assessment, placing on the market, post-market surveillance and incident management, as required by the AI Act.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><em>The management cycle remains the same; what changes are some of the pieces of evidence that must be produced during that cycle.<\/em><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Where do they apply?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ISO\/IEC 42001 is an international standard and can be implemented in any organisation, regardless of its geographical location. By contrast, EN 18286 is being developed specifically to support the implementation of the European AI Regulation and, as such, its scope is linked to the European market and to organisations that place AI systems on the market or put them into service within the European Union.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><em>EN 18286 can be understood as a European standard that adapts a management approach similar to that of ISO\/IEC 42001 to the regulatory context of the AI Act.<\/em><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Why are there two standards?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because they pursue different objectives whilst using virtually the same architecture.<\/p>\n\n\n\n<ul style=\"padding-right:25px;padding-left:25px\" class=\"wp-block-list\">\n<li>ISO\/IEC 42001 aims to improve the management of artificial intelligence through a risk-based approach, leadership, accountability, oversight and continuous improvement.<\/li>\n\n\n\n<li>EN 18286 aims to ensure that this same process also serves to demonstrate compliance with the requirements set out in the European AI Regulation.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><em>EN 18286 does not replace ISO\/IEC 42001; it turns it into a tool for regulatory compliance.<\/em><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Why use them together?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A joint implementation offers a clear advantage: it avoids the need to build two separate management systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An organisation that already has a system compliant with ISO\/IEC 42001 has a solid foundation on which to incorporate the specific requirements set out in EN 18286 to support compliance with the AI Act. Similarly, an organisation that implements EN 18286 directly will, to a large extent, be adopting the structure and management system requirements established by ISO\/IEC 42001. The result is a single management system capable of simultaneously meeting two complementary objectives: on the one hand, managing artificial intelligence effectively, responsibly and reliably; and on the other, demonstrating that such management complies with the obligations set out in the AI Act.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"683\" src=\"https:\/\/i2sc.es\/wp-content\/uploads\/2026\/07\/infog_42001_18286_en.png\" alt=\"\" class=\"wp-image-965\" srcset=\"https:\/\/i2sc.es\/wp-content\/uploads\/2026\/07\/infog_42001_18286_en.png 1536w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/07\/infog_42001_18286_en-300x200.png 300w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/07\/infog_42001_18286_en-1024x683.png 1024w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/07\/infog_42001_18286_en-768x512.png 768w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/07\/infog_42001_18286_en-18x12.png 18w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Conclusion<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ISO\/IEC 42001 and EN 18286 share a largely similar management framework, but serve different purposes. The former provides an international framework for managing artificial intelligence through a management system, whilst the latter focuses that same framework on demonstrating compliance with the AI Act.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><em>An organisation can implement ISO\/IEC 42001 without needing to apply EN 18286. However, organisations that need to demonstrate compliance with the AI Act will find that EN 18286 provides a natural complement to the framework already established by ISO\/IEC 42001<\/em>.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For organisations, the practical implication is clear: it is not a question of implementing two parallel systems, but of establishing a common foundation and subsequently addressing any regulatory gaps.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><em>An organisation that is certified to or aligned with ISO\/IEC 42001 should not set up a second management system from scratch. It should carry out a mapping and gap analysis, identify the additional regulatory requirements of EN 18286, and expand its processes, responsibilities and documentary evidence.<\/em><\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>El panorama europeo de normalizaci\u00f3n de la inteligencia artificial se encuentra en un momento especialmente relevante. Tras la publicaci\u00f3n de ISO\/IEC 42001 como primer est\u00e1ndar internacional para los sistemas de gesti\u00f3n de la inteligencia artificial, recientemente CEN\/CENELEC ha publicado EN 18286 como norma europea orientada a los sistemas de gesti\u00f3n de la calidad para fines [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":962,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-959","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts\/959","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/comments?post=959"}],"version-history":[{"count":4,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts\/959\/revisions"}],"predecessor-version":[{"id":966,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts\/959\/revisions\/966"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/media\/962"}],"wp:attachment":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/media?parent=959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/categories?post=959"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/tags?post=959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}