Etisalat UAE Achieves ISO/IEC 42001 AI Management Certification: What GCC Organisations Can Learn
Etisalat UAE has announced that its Artificial Intelligence Management System has achieved accredited certification to ISO/IEC 42001:2023, marking a significant development in the adoption of formal AI governance standards in the Gulf region.
The announcement, reported by the Emirates News Agency on 19 October 2026, follows an independent assessment by international assurance and certification provider LRQA.
The certification reflects etisalat UAE's efforts to establish structured processes for managing artificial intelligence across its operations, including AI risk assessment, accountability, human oversight and continuous improvement.
For organisations in Qatar and across the Gulf Cooperation Council (GCC), the development provides an example of how international AI management standards can be integrated into organisational governance.
What is ISO/IEC 42001?
ISO/IEC 42001:2023 is the international standard for Artificial Intelligence Management Systems (AIMS).
Published in December 2023 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), it establishes requirements for organisations to develop, implement, maintain and continually improve a management system addressing artificial intelligence.
Unlike technical standards focused on individual AI systems, ISO/IEC 42001 provides an organisational framework for managing the risks and opportunities associated with developing, deploying and using AI.
The standard is intended for organisations of different sizes and sectors, including businesses, government institutions and organisations providing or using AI-enabled products and services.
Its approach encourages organisations to establish appropriate policies, define responsibilities, assess risks and evaluate the effectiveness of their AI management arrangements.
What Has Etisalat UAE Achieved?
According to the official announcement, etisalat UAE obtained accredited certification following an independent assessment conducted by LRQA.
The process involved collaboration between several internal departments, including technology, AI engineering, business excellence and teams responsible for operational AI applications.
The company's AI Management System addresses areas including accountability, risk and impact assessment, AI lifecycle controls, transparency, human oversight and performance evaluation.
These arrangements are intended to provide consistent governance as the company expands the use of AI across its services and operations.
The announcement also connects the certification with etisalat UAE's activities in agentic AI and AI-enabled cybersecurity.
The distinction is important: AI governance is not simply about implementing new technology. It requires organisations to establish processes for determining how that technology should be developed, managed and supervised.
Why Is AI Management Certification Becoming Important?
Organisations increasingly use artificial intelligence across business processes, customer services, data analysis and operational decision-making.
As adoption expands, responsibility for AI governance cannot remain exclusively with technical teams.
Organisations need to consider who is accountable for AI systems, how potential risks are identified and whether appropriate controls remain effective throughout the technology lifecycle.
ISO/IEC 42001 offers a structured approach to these challenges.
It provides a management framework that can support organisations in establishing consistent governance arrangements across departments and business functions.
For organisations already familiar with international management system standards, including ISO/IEC 27001 for information security management, ISO/IEC 42001 provides a complementary framework specifically addressing artificial intelligence.
However, certification to ISO/IEC 42001 is not itself proof that every AI system is risk-free, nor does it automatically establish compliance with all applicable legislation.
The scope of certification and the effectiveness of the organisation's continuing controls remain important considerations.
What Does This Mean for Qatar and the Wider GCC?
Etisalat UAE's announcement provides a relevant example for organisations across Qatar, Saudi Arabia, Bahrain, Kuwait, Oman and the UAE.
Businesses and public institutions increasingly need to consider how AI governance fits within their existing risk management and operational structures.
Although organisations may adopt different approaches depending on their activities and applicable requirements, ISO/IEC 42001 provides a recognised framework for developing more systematic AI oversight.
For organisations considering implementation, several practical steps may be useful:
Establish an AI governance policy: Define organisational objectives, responsibilities and acceptable AI use.
Identify and assess AI risks: Consider potential impacts on information security, privacy, operational reliability and affected individuals.
Implement appropriate controls: Establish processes covering AI development, procurement, deployment, monitoring and human oversight.
Develop employee capabilities: Provide relevant training for executives, AI specialists, compliance professionals and operational teams.
Evaluate effectiveness: Review the performance of AI governance arrangements and implement improvements where necessary.
These measures are recommendations for organisational good practice.
ISO/IEC 42001 is an international management system standard, not newly enacted GCC legislation. Etisalat UAE's certification announcement does not establish a legal requirement for organisations in Qatar or other GCC countries to obtain certification.
Professional Training Is Essential to AI Governance
Implementing an AI Management System requires more than developing policies and documentation.
Organisations also need employees with the knowledge to identify AI risks, understand relevant governance requirements and establish effective management processes.
This creates professional development needs across several functions.
Senior executives need to understand organisational accountability and the strategic implications of AI adoption.
Compliance and risk management professionals require knowledge of AI governance frameworks, risk assessment and internal controls.
Technical specialists need to understand how AI management requirements apply throughout system development, implementation and monitoring.
Professional training can help bridge these capabilities.
Developing AI Governance Capabilities with MENA Executive Training
MENA Executive Training supports organisations in Qatar and across the GCC through professional training in artificial intelligence governance, information security, cybersecurity and international management standards.
Relevant programmes include ISO/IEC 42001 AI Management Systems training, alongside the IAPP Artificial Intelligence Governance Professional (AIGP) programme.
These programmes support professionals seeking to understand responsible AI implementation, organisational governance and recognised approaches to AI risk management.
As AI adoption expands across the region, developing these capabilities can help organisations establish more consistent and accountable approaches to using artificial intelligence.
Etisalat UAE's certification illustrates how AI governance can move from organisational principles towards independently assessed management practices.
