vista infosec white

Management System Certification Schemes

Explore VISTA InfoSec’s Artificial Intelligence Management System (AIMS) and Information Security Management System (ISMS) certification schemes, including processes, application requirements and downloadable documents.

Management System Certification Schemes | VISTA InfoSec
Our certification schemes

Choose the certification scheme relevant to your organisation

Find scheme-specific information, certification stages, required application documents, and formal procedures.

AI governance

ISO/IEC 42001:2023

Artificial Intelligence Management System (AIMS)

For organisations that develop, provide or use AI systems.

Explore AIMS certification →
Information security

ISO/IEC 27001:2022

Information Security Management System (ISMS)

For organisations seeking to manage the confidentiality, integrity and availability of information.

Explore ISMS certification →
01
AIMS certification scheme

ISO/IEC 42001:2023

Artificial Intelligence Management System (AIMS)

Overview

VISTA InfoSec operates a third-party Artificial Intelligence Management System (AIMS) certification scheme based on ISO/IEC 42001:2023, the international standard for the responsible management of AI systems. VISTA InfoSec offers AIMS certification services to clients in India and internationally.

Scope

VISTA InfoSec certifies organizations of any type or size that develop, provide or use AI systems, across industrial, commercial and public sectors.

Benefits of certification

  • Public demonstration of responsible and trustworthy AI governance
  • Enhanced corporate image and stakeholder confidence
  • Positive response from prospective customers and partners
  • Demonstrated management commitment to AI risk and impact management
  • A structured drive for continual improvement
  • Readiness for emerging AI regulations and client due-diligence requirements

Why choose VISTA?

  • Independent, impartial third-party assessment
  • Auditors experienced in information security, privacy and AI governance
  • Integrated audits available with ISO/IEC 27001 (ISMS) and ISO/IEC 27701 (PIMS)
  • Clear, documented certification process with defined timelines
  • Service to clients across India and internationally

Certification process

STEP 01

Enquiry and quotation

The client submits the AIMS Preliminary Information form, and VISTA issues a quotation.

STEP 02

Application

The client signs the Application and Certification Agreement and submits the required documents.

STEP 03

Stage 1 audit

Documentation review and readiness check of the AIMS, its scope, and the AI risk and impact assessments.

STEP 04

Stage 2 audit

On-site or remote assessment of AIMS implementation and effectiveness against ISO/IEC 42001.

STEP 05

Corrective actions

The client closes any nonconformities within the agreed timeframe.

STEP 06

Certification decision

Independent review and issue of the certificate, valid for three years.

STEP 07

Surveillance audits

Annual audits in the first and second years after certification.

STEP 08

Recertification

Full reassessment before the end of the three-year cycle.

Documents required with the application form

  • AI Policy and other AIMS policy documents
  • Statement of Applicability (SoA) against ISO/IEC 42001 Annex A controls
  • AIMS scope document (if scope and boundaries are documented separately)
  • Summaries of the AI risk assessment and AI system impact assessment

Forms & downloads

AIMS certification forms, procedures and supporting documents

Application for AIMS Certification
Form
↓ Download
Certification Agreement
Download
↓ Download
Procedure for Complaints and Disputes
Download
↓ Download
Procedure for Appeals
Download
↓ Download
Procedure for Impartiality
Download
↓ Download
Use of Certificates, Licences and Logos/Marks
Download
↓ Download
Sample Certificate of Conformity
Download
↓ Download
02
ISMS certification scheme

ISO/IEC 27001:2022

Information Security Management System (ISMS)

Overview

VISTA InfoSec operates a third-party Information Security Management System (ISMS) certification scheme based on ISO/IEC 27001:2022, the international standard for information security management. VISTA InfoSec has offered ISMS certification services since November 2001 to clients in India and internationally.

Scope

VISTA InfoSec certifies organizations of any type or size that seek to protect the confidentiality, integrity and availability of information, across industrial, commercial and public sectors.

Benefits of certification

  • Public demonstration of effective information security management
  • Enhanced corporate image and stakeholder confidence
  • Positive response from prospective customers and partners
  • Demonstrated management commitment to information security risk management
  • A structured drive for continual improvement
  • Support for regulatory, contractual and client due-diligence requirements

Why choose VISTA?

  • Independent, impartial third-party assessment
  • Auditors experienced in information security, privacy and AI governance
  • Integrated audits available with ISO/IEC 42001 (AIMS) and ISO/IEC 27701 (PIMS)
  • Clear, documented certification process with defined timelines
  • Service to clients across India and internationally

Certification process

STEP 01

Enquiry and quotation

The client submits the ISMS Preliminary Information form, and VISTA issues a quotation.

STEP 02

Application

The client signs the Application and Certification Agreement and submits the required documents.

STEP 03

Stage 1 audit

Documentation review and readiness check of the ISMS, its scope, and the information security risk assessment and treatment.

STEP 04

Stage 2 audit

On-site or remote assessment of ISMS implementation and effectiveness against ISO/IEC 27001.

STEP 05

Corrective actions

The client closes any nonconformities within the agreed timeframe.

STEP 06

Certification decision

Independent review and issue of the certificate, valid for three years.

STEP 07

Surveillance audits

Annual audits in the first and second years after certification.

STEP 08

Recertification

Full reassessment before the end of the three-year cycle.

Documents required with the application form

  • Information Security Policy and other ISMS policy documents
  • Statement of Applicability (SoA) against ISO/IEC 27001 Annex A controls
  • ISMS scope document (if scope and boundaries are documented separately)
  • Summaries of the information security risk assessment and risk treatment plan

Forms & downloads

ISMS certification forms, procedures and supporting documents

Application for ISMS Certification
Form
Coming Soon
Certification Agreement
Download
Coming Soon
Procedure for Complaints and Disputes
Download
Coming Soon
Procedure for Appeals
Download
Coming Soon
Procedure for Impartiality
Download
Coming Soon
Use of Certificates, Licences and Logos/Marks
Download
Coming Soon
Sample Certificate of Conformity
Download
Coming Soon

Expert Auditors. Faster Certification.

 

European Operations
European engagements are delivered through Zulon Audits OÜ, the European practice of VISTA InfoSec.
Visit Zulon Audits →