---
title: "United Kingdom — Standards & Conformity | Global AI Monitor"
canonical: https://artificial-intelligence.gi/jurisdictions/united-kingdom/standards-and-conformity/
source_html: /jurisdictions/united-kingdom/standards-and-conformity/index.html
description: "United Kingdom — Standards & Conformity: 09 Standards & Conformity Active ▾ # AI Cyber Security Code of Practice (Published 2025-01-31): Voluntary government code setting baseline cyber security principles for securing AI"
generated_at: 2026-10-25T22:24:54Z
content_sha256: 416b39fc412965ac970a5f21aeec00a7b684d491d1314a4be68bf4575933dc0a
generator: "fe-fleet/md-twin@1.0"
---
# United Kingdom — Standards & Conformity | Global AI Monitor

### 09Standards & ConformityActive▾#

AI Cyber Security Code of Practice (Published 2025-01-31): Voluntary government code setting baseline cyber security principles for securing AI systems.

3 instruments · 0 obligations · 8 claims

3 instruments (3 current) · 0 obligations · 8 claims · 0 milestones

Instruments

- AI Cyber Security Code of Practice Published 2025-01-31Voluntary government code setting baseline cyber security principles for securing AI systems. DSIT said it would submit the Code to ETSI as the basis for a global standard.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice)
- BS EN ISO/IEC 42001:2026 Artificial intelligence management system Published 2026-03-31UK and European adoption of ISO/IEC 42001 AI management system standard, published by BSI on 31 March 2026 with no technical differences from BS ISO/IEC 42001:2023.Non-binding · Authority: BSI Group (British Standards Institution) · Verified 8 Oct 2026 · [Official text](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1)
- ETSI EN 304 223 V2.1.1: Baseline Cyber Security Requirements for AI Models and Systems Date not recordedEuropean standard defining baseline security requirements for AI models and systems, including generative AI. It is voluntary unless adopted or referenced by a regulator.Non-binding · Authority: European Telecommunications Standards Institute · Verified 8 Oct 2026 · [Official text](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf)

Claims and evidence (8)
- ETSI published EN 304 223, defining baseline cyber security requirements for AI models and systems, based on DSIT's AI Cyber Security Code of Practice.Confidence: Probable · evidencedEvidence and sources[AI Cyber Security Code of Practice](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice) T1 · retrieved · retrieved 8 Oct 2026 · Code of Practice, next stepsFollowing support for our approach, DSIT, in close collaboration with NCSC, will submit the Code and the implementation guide in the European Telecommunications Standards Institute (ETSI) where it will be used as the basis for a new global standard (TS 104 223) and accompanying implementation guide
- [ETSI EN 304 223 V2.1.1 (2025-12): Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf) T1 · retrieved · retrieved 8 Oct 2026 · ETSI EN 304 223, clause 1 (Scope)The present document defines baseline security requirements for AI models and systems. The present document

- BSI published BS EN ISO/IEC 42001:2026 on 31 March 2026 as the UK/European adoption of ISO/IEC 42001:2023 for AI management systems, with no change to requirements.Confidence: Confirmed · As of 31 Mar 2026 · evidencedEvidence and sources[BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge page titleBS EN ISO/IEC 42001:2026 | 31 Mar 2026 | BSI Knowledge

- ETSI EN 304 223 defines baseline cyber security requirements for AI models and systems, developed from DSIT's AI Cyber Security Code of Practice in collaboration with NCSC.Confidence: Probable · evidencedEvidence and sources[ETSI EN 304 223 V2.1.1 (2025-12): Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf) T1 · retrieved · retrieved 8 Oct 2026 · ETSI EN 304 223, clause 1 (Scope)The present document defines baseline security requirements for AI models and systems. The present document

- BSI published BS EN ISO/IEC 42001:2026, the UK adoption of the AI management system standard, on 31 March 2026, with no technical changes from the 2023 edition.Confidence: Probable · As of 31 Mar 2026 · evidencedEvidence and sources[BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge page titleBS EN ISO/IEC 42001:2026 | 31 Mar 2026 | BSI Knowledge

- The AI Cyber Security Code of Practice sets baseline cyber security principles for AI systems and is a voluntary government code.Confidence: Probable · As of 31 Jan 2025 · evidencedEvidence and sources[AI Cyber Security Code of Practice](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice) T1 · retrieved · retrieved 8 Oct 2026 · Code of Practice, introductionThis Code of Practice sets out baseline cyber security principles to help secure AI systems and the organisations which develop and deploy them. Addressing the cyber risks to AI will protect our citizens and our digital economy while ensuring the man

- DSIT said it would submit the UK AI Cyber Security Code to ETSI as the basis for a global standard; ETSI later published EN 304 223.Confidence: Uncertain · As of 1 Dec 2025 · evidencedEvidence and sources[AI Cyber Security Code of Practice](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice) T1 · retrieved · retrieved 8 Oct 2026 · Code of Practice, next stepsFollowing support for our approach, DSIT, in close collaboration with NCSC, will submit the Code and the implementation guide in the European Telecommunications Standards Institute (ETSI) where it will be used as the basis for a new global standard (TS 104 223) and accompanying implementation guide
- [ETSI EN 304 223 V2.1.1 (2025-12): Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf) T1 · retrieved · retrieved 8 Oct 2026 · ETSI EN 304 223, clause 1 (Scope)The present document defines baseline security requirements for AI models and systems. The present document

- DSIT published a Copper Horse mapping of 2,182 AI security requirements onto the 13 principles of ETSI EN 304 223 and states the UK Code mirrors that standard.Confidence: Probable · As of 10 Jul 2026 · evidencedEvidence and sources[Mapping global AI security standards, regulations and guidance (DSIT)](https://www.gov.uk/government/publications/mapping-global-ai-security-standards-regulations-and-guidance) T1 · retrieved · retrieved 8 Oct 2026 · Page bodyCopper Horse then undertook a mapping of the 2,182 requirements against the 13 principles set out in the European Telecommunications Standards Institute’s AI security global standard, EN 304 223. The government’s AI Cyber Security Code of Practice mirrors EN 304 223.

- BSI published BS EN ISO/IEC 42001:2026 on 31 March 2026 as the UK and European adoption of ISO/IEC 42001 with no technical differences.Confidence: Probable · As of 31 Mar 2026 · evidencedEvidence and sources[BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge page titleBS EN ISO/IEC 42001:2026 | 31 Mar 2026 | BSI Knowledge
- [BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge product pageThere are no technical differences between BS ISO/IEC 42001:2023 and BS EN ISO/IEC 42001:2026. The 2026 version is the European and UK adoption of the same standard, with no changes to its requirements or guidance. If you purchased **BS EN IS
- [BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge product pageThe 2026 version is the European and UK adoption of the same standard, with no changes to its requirements or guidance. If you purchased BS EN ISO/IEC 42001:2026 in error and already hold BS ISO/IEC 42001:2023, please contact **Client Relatio

Open evidence