ISO/IEC 42001 Consultant in Delhi NCR

AIMS implementation and certification readiness for organisations in Delhi, Noida and Gurugram, from a team based in Noida.

We help organisations across Delhi NCR build an AI management system (AIMS) to ISO/IEC 42001 and take it through certification. Our office is at Corporate Park, Sector 142, Noida. Our consultants work on site in Delhi, Noida, Gurugram, Ghaziabad and Faridabad, and remotely where that suits the client better.

Certified AIMS work in Delhi NCR

Our ISO/IEC 42001 implementation for KPMG in India covered an AI platform where users bring their own data, built on retrieval augmented generation. SGS certified the AI management system in December 2025 for the Gurugram and Noida offices. We built it on the existing ISMS in about seven weeks, with the minimum of new documents. Read the KPMG case study.

Who we work with in Delhi NCR

• Global capability centres in Gurugram and Noida that build or run AI for a parent company abroad.
• IT services and SaaS firms whose clients now ask for ISO/IEC 42001 in contracts and security questionnaires.
• Banks, NBFCs and insurers using AI in credit, fraud detection and customer service.
• Hospitals and health technology firms using AI on patient data.
• Law, consulting and professional firms rolling out Copilot, ChatGPT Enterprise or legal AI tools.

What our ISO 42001 consulting covers

• AI system inventory. Every AI system you build, buy or extend, with its owner, data and risk tier.
• Gap assessment. Your current practice against clauses 4 to 10 and the Annex A controls of ISO/IEC 42001.
• AI risk assessment and AI system impact assessment. Clauses 6.1.2 and 6.1.4 and Annex A.5, run per system.
• Statement of Applicability. A justification for every Annex A control, including the ones you exclude.
• AI life cycle procedures. MLOps or LLMOps steps, matched to how you actually use AI.
• AI security under ISO/IEC 27090. ISO/IEC 27090:2026 gives guidance on security threats to AI systems, such as data poisoning, evasion, model extraction and prompt injection. We use it to find the AI security risks for each system and to choose the mitigations. Each one links to your Annex A controls and your ISMS. See our ISO/IEC 27090 map.
• Vendor and AI SaaS oversight. Supplier controls under Annex A.10 for the models and tools you buy.
• Internal audit and management review. Then support through the stage 1 and stage 2 certification audits.

How an engagement runs

1. Scoping call and AI inventory. We agree the systems in scope and who owns them.
2. Gap assessment and plan. You get a list of gaps, owners and dates.
3. Risk and impact assessments. We run them with your teams, system by system, with the AI security threats of ISO/IEC 27090 in view.
4. Policies, procedures and the Statement of Applicability. Built into your ISMS where you already have one.
5. Internal audit and management review. We test the system before the auditor does.
6. Certification audit support. With the accredited certification body of your choice.

Fees and timeline

Our consulting fees for ISO/IEC 42001 range from INR 5 lakh for a limited scope to INR 20 lakh for a complex scope. Certification body fees come on top and depend on the number of audit days. Most organisations reach audit readiness in three to eight months. See what drives the cost and the timeline.

Why organisations in Delhi NCR choose us

• A local team. We are based in Noida, so on site workshops across NCR need no travel budget.
• Qualified consultants. Six ISO/IEC 42001 Lead Auditors and Lead Implementers on our bench.
• Training depth. More than 2,000 professionals trained on ISO/IEC 42001, with Exemplar Global approved certificates.
• Security and privacy background. ISO/IEC 27001, ISO/IEC 27701 and DPDP Act work, so the AIMS fits what you already run.
• Indian regulation in view. The CERT-In AI Security Auditing Guidelines name ISO/IEC 42001 as their primary alignment standard. See our CERT-In map and the free self assessment.

Training for your team

We also run ISO/IEC 42001 Lead Implementer, Lead Auditor and AI System Impact Assessment courses in Delhi NCR and online. Many clients train an internal lead implementer alongside the consulting work. See ISO 42001 training in Delhi NCR.

Frequently asked questions

Do you work on site in Delhi and Gurugram?

Yes. Our team is in Noida, and we run workshops, interviews and audits on site anywhere in Delhi NCR. Remote work is available for teams spread across cities.

How much does ISO 42001 consulting cost in Delhi NCR?

Our consulting fees range from INR 5 lakh for a limited scope to INR 20 lakh for a complex scope. The number of AI systems and whether you build or buy AI drive most of the difference.

We already hold ISO 27001. Does that help?

Yes. ISO/IEC 42001 uses the same management system structure, so we extend your ISMS rather than build a second system. That is how we delivered the KPMG certification with very few new documents.

Do you also cover ISO/IEC 27090?

Yes. ISO/IEC 27090 is guidance, so there is no certificate for it. We use it inside the ISO/IEC 42001 work to identify AI security threats and to plan mitigations. It also prepares you for the AI security tests that the CERT-In Guidelines describe.

Who needs ISO 42001 certification?

Any organisation that builds, buys or uses AI can use ISO 42001. Certification matters most when clients ask for proof of AI governance in contracts or due diligence. In Delhi NCR that is often a global capability centre, a SaaS firm or a BFSI business.

How does ISO 42001 relate to the EU AI Act?

ISO 42001 is a management system standard, and the EU AI Act is a law. A certified AIMS does not prove compliance with the Act on its own. It does give you the governance, risk assessment and documentation that the Act expects, so firms selling AI into Europe often start with ISO 42001.

Is ISO 42001 certification mandatory in India?

It is not a legal requirement in India today. The CERT-In AI Security Auditing Guidelines of November 2026 name ISO/IEC 42001 as their primary alignment standard, and clients increasingly ask for it in contracts. The Bureau of Indian Standards has adopted it as IS/ISO/IEC 42001:2023, and NABCB has accredited four certification bodies for it. See which ones.

Which certification body should we use?

Any accredited certification body that audits ISO/IEC 42001. Their auditors work to ISO/IEC 42006. We prepare you for the audit and stay independent of the body you choose.

Talk to us

Book a 30 minute AIMS readiness call with Sandhya Khamesra, or call +91 120 432 3179. Pricoris LLP, 1002, Tower A, Corporate Park, Sector 142, Noida 201305.