Rapid7 Achieves ISO/IEC 42001 Certification for AI Management System
Summary
Rapid7 says its AI Management System received ISO/IEC 42001:2023 certification after an independent audit. The certification covers AI capabilities in several Rapid7 products and is maintained through annual surveillance audits.
Key points
- Rapid7 says Schellman Compliance issued its ISO/IEC 42001:2023 certification after an independent audit of its AI governance system.
- The certification covers governance of AI risks and impacts, data management, production monitoring, and human oversight across the AI lifecycle.
- In-scope capabilities span Rapid7 products including MDR, Exposure Command, Surface Command, InsightIDR, and InsightCloudSec.
- The Agentic AI Workflow for MDR supports Rapid7's SOC analysts as they investigate and respond for MDR customers.
- Rapid7 says the certification is maintained through annual surveillance audits and does not replace customers' own due diligence.
Article Details
- Event Type
- AI management system certification
- Impact
- Rapid7 reports that its Artificial Intelligence Management System has achieved ISO/IEC 42001:2023 certification after an independent audit by Schellman Compliance, LLC. The certification covers AI systems in specified Rapid7 offerings and is maintained through annual surveillance audits. Rapid7 says it provides customers with audited evidence of its AI governance practices; it does not replace customers’ own due diligence or control over how they use AI outputs.
Vendors
Products
Exposure CommandAI-Generated Risk Summaries (Exposure Command and Surface Command)Incident CommandAI-Powered Log Search (Incident Command / InsightIDR)InsightCloudSecICS Runtime Event Story (InsightCloudSec / Cloud Runtime)InsightIDRAI-Powered Log Search (Incident Command / InsightIDR)Managed Detection and ResponseAgentic AI Workflow for MDR (Managed Detection and Response)Surface CommandAI-Generated Risk Summaries (Exposure Command and Surface Command)