Deloitte's board-level research found that 66% of boards still have limited-to-no knowledge of AI, an improvement from 79% a year earlier but still a majority, and a useful measure of how scarce solid AI governance knowledge remains. That scarcity is the key to a question many people ask: can you take the ISO 42001 Lead Implementer without the Foundation certificate? In most cases you can, because Foundation is a recommended precursor rather than a hard prerequisite. What decides whether you should is the difference between skipping the certificate and skipping the knowledge.
Foundation is recommended, not required
Yes, you can go straight to the Lead Implementer in most cases. The caveat is that the Lead Implementer does not stand on its own; it builds directly on the understanding the Foundation level provides. The professional level asks you to apply the requirements of ISO/IEC 42001 to real situations, so without the foundational knowledge you are applying ideas you have not yet learned. The honest answer is simple: you may skip the certificate, but you should not skip the knowledge.
Skipping the certificate is not skipping the knowledge
This is the distinction that resolves the whole question. The Foundation certificate is a credential; the Foundation knowledge is a capability. If you already hold the capability, from a related standard or from experience, you can safely forgo the credential and go direct. If you do not, taking the Lead Implementer first will be a struggle no matter what the enrolment rules allow, which is why that grounding is worth having given how scarce it remains. Understanding what Foundation covers, the essentials of an AI management system, the structure of ISO/IEC 42001, and the core governance responsibilities, is what the Lead Implementer assumes you bring.
Equivalent knowledge lets you go straight to Lead Implementer
Some people already hold the foundational knowledge without ever having taken Foundation, and for them going direct makes good sense. You are likely in this group if one or more of the following is true.
-
You work in AI governance already, and are comfortable with policies, risk, and controls for AI.
-
You hold a closely related management-system qualification, such as ISO/IEC 27001, whose structure and logic carry over directly.
-
You have strong governance, risk, or audit experience, and can quickly place AI-specific ideas into a framework you already know.
If that describes you, the Foundation certificate would mostly confirm what you can already do, so beginning at the Lead Implementer is reasonable.
Without the groundwork, take Foundation first
For everyone else, Foundation first is what makes the Lead Implementer work. If AI governance is new to you, or you have not worked with a formal management system, the professional level will move fast over ground you have not covered. This matters more as regulation such as the EU AI Act raises the stakes for getting AI governance right, so the grounding is worth having before you build. Taking Foundation first gives you the shared language and the map, so the Lead Implementer becomes about building rather than catching up, not a sign that you are not ready.
The Skip-Foundation Readiness Check
The cleanest way to decide is to test the knowledge directly rather than the credential. Read the five statements below. If you can confidently explain each, you likely have the Foundation-level knowledge and can go straight to the Lead Implementer. If several feel shaky, start with Foundation.
|
Can you confidently explain this? |
Covered by Foundation |
|---|---|
|
What an AI management system is and what it does |
Yes |
|
The purpose and overall structure of ISO/IEC 42001 |
Yes |
|
The core AI governance responsibilities: policy, risk, controls, audit |
Yes |
|
The main AI risks: bias, transparency, human oversight, third-party models |
Yes |
|
How governing AI differs from building AI |
Yes |
A confident yes to all five is a strong sign you can skip the certificate. Two or more hesitations are a sign that Foundation first will save you effort and get you more from the Lead Implementer.
The verdict: skip the certificate, keep the knowledge
Can you take the Lead Implementer without Foundation? Almost always, yes, because Foundation is recommended rather than required. Should you? Only if you already hold the knowledge it teaches. Confirm that honestly, using the check above and the Lead Implementer requirements for the fuller picture, and then choose. If the knowledge is there, the ISO 42001 Lead Implementer certification is a fine place to start; if it is not, the Foundation certification first will repay the time many times over.
Frequently asked questions
Is Foundation mandatory before the Lead Implementer?
In most cases no. Foundation is a strongly recommended precursor rather than a hard prerequisite, so you can usually enrol in the Lead Implementer directly. What matters is whether you already have the foundational knowledge, not whether you hold the certificate.
Can I skip Foundation if I have ISO 27001?
Often yes. ISO/IEC 27001 shares its management-system structure and controls logic with ISO 42001, so an ISO 27001 background gives you much of the foundational understanding. You may still want to review the AI-specific concepts, but you can reasonably go straight to the Lead Implementer.
What is the risk of skipping Foundation?
The risk is not administrative but practical: without the foundational knowledge, the Lead Implementer asks you to apply ideas you have not learned, which makes it harder and less rewarding. If you have the knowledge from elsewhere, there is little risk; if you do not, you will feel the gap.
How do I know if I am ready to skip Foundation?
Test the knowledge, not the credential. If you can confidently explain what an AI management system is, the structure of ISO/IEC 42001, the core governance responsibilities, and the main AI risks, you are likely ready to go direct. If several of those are unclear, take Foundation first.
Will I get a worse result skipping Foundation?
Not if you already hold the knowledge; the outcome depends on capability, not on which certificates you collected. But if you skip both the certificate and the underlying knowledge, you are more likely to struggle, so make sure the understanding is in place either way.