{"schemaVersion":"ready-scan.resource-sources.v1","locale":"zh-Hans","path":"/zh-Hans/sources/source-00ca0f831fbaeb87","canonicalUrl":"https://readyscan.ai/zh-Hans/sources/source-00ca0f831fbaeb87","machineUrl":"https://readyscan.ai/zh-Hans/discovery/sources/source-00ca0f831fbaeb87.json","page":1,"pageSize":48,"totalCount":1,"totalPages":1,"previous":null,"next":null,"kind":"source","source":{"id":"source-00ca0f831fbaeb87","url":"https://www.enz.ai/solutions/laws-orders/iso-42001","title":"Enzai: /solutions/laws-orders/iso-42001","publisher":"enz.ai","publicationCount":1,"modifiedOn":"2026-10-20","path":"/zh-Hans/sources/source-00ca0f831fbaeb87","canonicalUrl":"https://readyscan.ai/zh-Hans/sources/source-00ca0f831fbaeb87","machineUrl":"https://readyscan.ai/zh-Hans/discovery/sources/source-00ca0f831fbaeb87.json"},"items":[{"key":"subject:Q139782901","citations":[{"id":"source-00ca0f831fbaeb87","url":"https://www.enz.ai/solutions/laws-orders/iso-42001","title":"Enzai: /solutions/laws-orders/iso-42001","publisher":"enz.ai","accessedOn":"2026-10-20"}],"editions":[{"language":"en","title":"Enzai","description":"Enzai: “Enzai provides purpose-built AI infrastructure for governing autonomous AI agents and models, replacing legacy GRC bolt-ons for the EU AI Act and ISO 42001.”","path":"/entities/enzai-q139782901","canonicalUrl":"https://readyscan.ai/entities/enzai-q139782901","machineUrl":"https://readyscan.ai/discovery/entities/enzai-q139782901.json","modifiedOn":"2026-10-20"}],"subject":{"slug":"enzai-q139782901","name":"Enzai","questions":[{"question":"What's the difference between ISO 42001 and ISO 27001?","path":"/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-b9efe93eea33ff52de64"},{"question":"Is ISO 42001 mandatory?","path":"/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-fae4067215f18474e36e"},{"question":"How long does ISO 42001 certification typically take?","path":"/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-581380ea9ae9076a870b"},{"question":"How do Annex A controls map to operational workflows?","path":"/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-d24477158e3f795f5f1a"}],"facts":[{"id":"content-native-digital-agencies-011390cf505af905-a-b9efe93eea33ff52de64","label":"What's the difference between ISO 42001 and ISO 27001?","value":"“ISO 27001 is the information security management system standard. ISO 42001 is the AI management system standard, covering governance and operational controls for AI specifically. The two are complementary, and an AI-using enterprise typically needs both rather than one or the other.”","path":"/entities/enzai-q139782901#company-fact-content-native-digital-agencies-011390cf505af905-a-b9efe93eea33ff52de64","questionPaths":["/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-b9efe93eea33ff52de64"]},{"id":"content-native-digital-agencies-011390cf505af905-a-fae4067215f18474e36e","label":"Is ISO 42001 mandatory?","value":"“ISO 42001 is a voluntary management-system standard, but it is becoming a de facto procurement requirement. Enterprise buyers increasingly require ISO 42001 certification or evidence of readiness from AI vendors, similar to ISO 27001's trajectory a decade ago.”","path":"/entities/enzai-q139782901#company-fact-content-native-digital-agencies-011390cf505af905-a-fae4067215f18474e36e","questionPaths":["/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-fae4067215f18474e36e"]},{"id":"content-native-digital-agencies-011390cf505af905-a-581380ea9ae9076a870b","label":"How long does ISO 42001 certification typically take?","value":"“From AIMS design to certification award, certification typically takes 9-18 months depending on starting maturity. Enzai compresses the build phase and provides continuous evidence capture for the operational phase that auditors examine during Stage 2.”","path":"/entities/enzai-q139782901#company-fact-content-native-digital-agencies-011390cf505af905-a-581380ea9ae9076a870b","questionPaths":["/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-581380ea9ae9076a870b"]},{"id":"content-native-digital-agencies-011390cf505af905-a-d24477158e3f795f5f1a","label":"How do Annex A controls map to operational workflows?","value":"“Annex A is structured as control objectives (A.5 risk management, A.6 risk treatment, A.7 impact assessment, A.8 third-party use, A.9 data quality, others). Enzai implements each Annex A control as an operational workflow tied to the AI inventory.”","path":"/entities/enzai-q139782901#company-fact-content-native-digital-agencies-011390cf505af905-a-d24477158e3f795f5f1a","questionPaths":["/entities/enzai-q139782901#company-answer-content-native-digital-agencies-011390cf505af905-a-d24477158e3f795f5f1a"]},{"id":"content-native-digital-agencies-011390cf505af905-a-add4a6591fbba30231cd","label":"ISO 42001 certification: clauses, Annex A, audits | Enzai","value":"“What ISO/IEC 42001 asks of you: clauses 4 to 10, the 38 Annex A controls, the Statement of Applicability, the certification audit and what it won’t cover.”","path":"/entities/enzai-q139782901#company-fact-content-native-digital-agencies-011390cf505af905-a-add4a6591fbba30231cd","questionPaths":[]}]},"selected":{"language":"en","title":"Enzai","description":"Enzai: “Enzai provides purpose-built AI infrastructure for governing autonomous AI agents and models, replacing legacy GRC bolt-ons for the EU AI Act and ISO 42001.”","path":"/entities/enzai-q139782901","canonicalUrl":"https://readyscan.ai/entities/enzai-q139782901","machineUrl":"https://readyscan.ai/discovery/entities/enzai-q139782901.json","modifiedOn":"2026-10-20"}}],"versionId":"fnv1a64:05d8bed8a0079e31"}