Records for the AI system in your management system
Validate, deploy, monitor and log each detector, with a person deciding.
Requirements
| Clause | What it asks | ARRTECH |
|---|---|---|
| A.6.2.4 | Verification and validation. | Replay measures. → |
| A.6.2.5 | Deployment. | Recorded promotion. → |
| A.6.2.6 | Operation and monitoring. | Telemetry health per finding. → |
| A.6.2.8 | Event logs. | Authorization outcome records. → |
Validation
Measure before you deploy
Shadow findings go to a separate channel, and replay measures precision, recall, stability and volume.
Deployment
Promote with a record
Each of the 21 detectors is disabled, shadow or production. Promotion and rollback are recorded.
Operation
Watch the system in use
Every finding shows observed value, baseline, score, threshold, evidence timeline and intel provenance, with telemetry health beside it.
Logging
Log every request and its outcome
Cyberdroid AI Investigation records every request as Task, Pending approval, Refused or Rate-limited, with an operation id and a reason.
Residency
Keep inference in your environment
Inference runs in your environment by default. Any external fallback is a policy you set and can see.
Limits
Know what stays with you
No ARRTECH product produces the record for these requirements.
A.5
AI system impact assessment. That is your organization’s own work.
A.2
AI policy. That stays with you.
A.7
Data for AI systems. ARRTECH does not yet publish model sources.
A.10.3
Supplier information. ARRTECH does not yet publish documentation for its models.
By rule
Naming a clause is not a claim of certification.
A.6.2.4
Verify and validate the AI system against defined criteria. ARRTECH: replay measures precision, recall, stability and volume.
A.6.2.5
Document a deployment plan and meet its requirements. ARRTECH: shadow to production promotion recorded per detector.
A.6.2.6
Operate and monitor the AI system. ARRTECH: each finding shows telemetry health beside it.
A.6.2.8
Record event logs for the AI system. ARRTECH: every request recorded with an outcome, an operation id and a reason.
Questions
Is ARRTECH ISO 42001 certified?
This page makes no such claim. Certification belongs to an organization’s AI management system.
Who certifies against ISO 42001?
Accredited bodies, under the additional requirements in ISO/IEC 42006:2025.
Is AI Investigation available?
In early access. It requires Cyberdroid AI Detection.
Does AI close a case on its own?
No. Delegated work ends in review, and a person decides.
Sources
Guide
What is ISO 42001?
The international standard for an AI management system, published in 2023.
Who can be certified?
Organizations, for their AI management system. Products are not certified.
What is ISO/IEC 42006?
The 2025 standard that sets additional requirements for bodies that audit and certify AI management systems.
Next steps
Every detector on the record. Learns what normal looks like for every user, computer and application from your SIEM, and flags what changes.
Every request on the record. Investigates each finding with read-only queries and hands a person the evidence. It never approves its own work.
Prove every log. Collects and signs logs from more than 500 source types and links related events, with a verification tool for every export.
Keep sensitive data in. Checks email, uploads, USB drives and AI prompts before sensitive data leaves the computer.
Respond with a person in charge. Runs incident response steps through your existing tools, with a person approving each decision.
