Coral assisted Tatras achieve AI governance with ISO 42001 certification

From AI Innovation to ISO 42001 Certification

Tatras builds AI-powered business solutions for its globall customers. They wanted to demonstrate that responsible AI was embedded in its operations. Its teams had technical expertise, but needed a consistent way to manage AI risks, assign accountability, and demonstrate effective governance.

We at Coral eSecure worked alongside the company through seven milestones.

1. Understanding the Business and Defining the Scope

We began by understanding the company’s AI solutions, customers, and business objectives. Together, we agreed which activities and systems the AIMS would cover.

2. Reviewing AI Systems, Impacts, Risks, and Gaps

We mapped the AI portfolio, examined potential consequences for people, and identified weaknesses in existing practices. This gave the team a prioritised action plan.

3. Designing the AIMS

We translated the findings into objectives, responsibilities, and controls tailored to the organisation and its individual AI use cases.

4. Defining Policies and Working Practices

We helped teams document how they would govern AI, making expectations clear and usable in everyday work.

5. Implementing and Monitoring Controls

Working with the client’s teams, we supported implementation and established checks to identify problems and track performance.

6. Measuring Results and Reviewing Readiness

Performance reviews, an independent internal audit, and management review helped evaluate effectiveness and address findings.

7. Supporting Certification

We supported preparation for the certification body’s Stage 1 and Stage 2 audits and helped coordinate responses to findings. Following successful completion, the certification body awarded ISO 42001 certification.

A Foundation for Continued Improvement

The client gained clearer ownership, repeatable governance practices, and evidence to support customer assurance. An annual activity calendar provided a practical way to maintain and improve the AIMS after certification.