General: questions and answers.

Basenorm is an EU-native platform for ISO 42001 and ISO 27001. You run your AI management system and your ISMS on one control library: shared controls and evidence are maintained once, and AI-specific requirements are added where they are needed. Basenorm is based and hosted in the Netherlands.

Continuous compliance means your controls, evidence and owners stay current throughout the year, instead of being assembled in the weeks before an audit. Management system standards such as ISO 27001 and ISO 42001 already ask for this through monitoring, internal audits, management review and continual improvement.

Audit preparation is a project before an audit: collecting evidence, updating documents and closing gaps. Continuous assurance is the way of working that keeps that project small, because the management system is maintained all year and the audit checks what is already there. Basenorm is built for continuous assurance; the auditor still makes the judgement.

A control is a measure that reduces a risk, such as access management, backups, supplier assessments or human oversight of an AI system. ISO 27001:2022 groups its 93 Annex A controls into four themes: organisational, people, physical and technological. In Basenorm you define a control once and link it to every standard it counts for.

It depends on your scope and starting point, so there is no fixed number of weeks. You build the ISMS, run it for a while, complete an internal audit and a management review, and then undergo the two-stage certification audit. The auditor needs to see that the management system actually works, not only that documents exist.

No. An accredited certification body performs the certification audit and decides on the certificate. Basenorm helps you set up, run and demonstrate your management system.