KPMG Canada has earned certification from the world's first international standard for AI management systems, ISO 42001, reinforcing its commitment to responsible AI. This certification enhances KPMG’s ability to help Canadian businesses scale AI responsibly through effective governance, risk management and oversight.
“Our clients trust us to help them navigate complex technology transformations with confidence,” says Stephanie Terrill, Canadian Managing Partner of Digital Transformation at KPMG Canada. “Achieving ISO 42001 certification reflects our dedication to responsible AI and validates the governance, accountability and oversight practices we've put in place within our own organization. It also gives us first-hand experience so we can better support clients as they look to scale AI and build trust in their own systems.”
ISO 42001, developed by the International Organization for Standardization (ISO), provides a framework for governing the development, deployment and use of AI systems through clear accountability, risk management, oversight, monitoring and continuous improvement. The certification positions KPMG among the first professional services firms in Canada to attain the designation.
“Organizations are moving quickly from AI experimentation to enterprise-scale deployment, but the technology alone is not enough,” says Kareem Sadek, Partner and National Leader of Trusted AI and Digital Assets at KPMG Canada. "Business leaders, boards and regulators are increasingly asking how AI is being governed, who is accountable, and whether organizations can demonstrate that they have the appropriate controls in place. By pursuing the ISO 42001 certification and further embedding responsible AI governance into our own operations, we’ve gained practical experience and insights we can share with clients who are facing the same questions.”
Over the past year, AI governance has emerged as a key business priority for Canadian executives. According to KPMG's Global AI Pulse survey, 82 per cent of Canadian business leaders say concerns related to data security, privacy and risk are causing them to pause or slow down aspects of their AI strategy. At the same time, four in five report that AI-related topics are already being discussed at the board level, underscoring the growing importance of governance as organizations scale AI adoption.
ISO 42001 is designed to help organizations address common issues including unclear accountability, inconsistent risk assessments, fragmented oversight and limited visibility into how AI is being used across the enterprise. The standard helps organizations transform broad guidelines into a repeatable governance framework supported by documented controls, monitoring and independent assurance.
"The value of this certification extends beyond just compliance," says Mr. Sadek. "It helps create the confidence needed to scale AI responsibly. Organizations need governance models that enable innovation rather than slow it down. When leaders have greater visibility into how AI is being used, who is accountable and how risks are being managed, they can move faster and make decisions with greater assurance."
The certification process for KPMG Canada was conducted by Schellman Compliance, an ISO 42001 accredited certification body.
