Trust by Design: Building AI governance with ISO/IEC 42001

White paper

10 Mar 2026

Artificial Intelligence (AI) has become a transformative force across industries, but alongside its promise comes heightened scrutiny over trust, ethics, and governance. Organizations are realizing that simply having advanced AI features is not enough – they must prove their AI systems are trustworthy and responsible.

In response to these demands, a new paradigm has emerged: “Trust by Design.” Building on the foundations of "Secure by Design" and "Privacy by Design," which shifted security and privacy considerations to the earliest design stages, Trust by Design expands this scope to encompass trustworthiness.

A key development that enables the realization of Trust by Design is the recent publication of ISO/IEC 42001:2023, the first international standard for AI management systems (AIMS). This standard provides a structured framework for establishing, implementing, and continuously improving organizational AI governance. It guides organizations in managing AI-specific risks and ensures the responsible use of AI, aligning with evolving regulatory requirements.

Would you like to learn how ISO/IEC 42001 can help your organization implement Trust by Design and achieve transparent, accountable AI operations? Download your copy of our white paper today.

Ali Behbahani

Global Product Portfolio Manager - Cybersecurity & AI Certification, TÜV SÜD

With over two decades of leadership in mission-critical industries, Ali Behbahani combines deep expertise in IT, OT, and AI to help organizations navigate the evolving landscape of cybersecurity, AI governance, and global regulatory frameworks. He works with companies to perform business impact evaluations, risk assessments, and risk mitigation planning, while assessing how their products affect individuals, communities, and society at large.

In his current role, Ali leads TÜV SÜD’s global cybersecurity and AI certification programs, advancing the adoption of ISO/IEC 42001 as a responsive and ethical AI framework across industries from finance to healthcare. Positioned as both a strategic advisor and “North Star” for organizations worldwide, he develops AI policies and procedures that reduce costs, enhance trust, accelerate compliance, and foster innovation — bridging regulatory obligations with measurable business value.