Two years ago, almost no one outside compliance circles had heard of ISO/IEC 42001, the first international standard for AI management systems. Today, AI governance questions are showing up routinely in enterprise procurement and vendor-risk processes, and analysts increasingly expect ISO 42001 to follow the same trajectory as ISO 27001: from "nice to have" to simply expected.
