Is ISO 27001 Certification Sufficient?

ISO 27001 covers general information security but does not specifically address AI-related risks such as bias, explainability or algorithmic discrimination. For comprehensive AI governance, ISO/IEC 42001 is also recommended, as this standard specifically addresses AI management systems. Both standards can be used in a complementary manner.