Specific questions, answers with a defined scope.

It is published under my name and editorial responsibility. I am Fernando Arrieta, a management systems auditor, writer and editor. This site brings together my public work and my way of interpreting evidence, systems and decisions that demand accountability.

I work on auditing, ISO standards, quality, information security, artificial intelligence governance and institutional integrity. The common thread is concrete: what an organisation can demonstrate when someone asks it to substantiate its claims.

A personal archive of criteria, reports, definitions and public appearances. The criteria establish a position; the reports explore a question with sources and limitations; the glossary clarifies how I use each term.

This is my personal site. I chair IAC, which is why that role is clearly declared; even so, this site does not officially speak on behalf of IAC, G-CERTI or any other institution. Each organisation maintains its own channels, authorities and official communications.

It provides a third-party statement of conformity with defined requirements. Its meaning is limited by the standard, scope, dates and body listed on the certificate. It does not, by extension, certify the entire organisation, every product or the absence of failures.

Technical source ISO/CASCO · Frequently asked questions about management system certification

Yes. An organisation can use a standard to structure its system, review risks or improve its operations without applying for a certificate. Certification is a route to conformity assessment when the document contains certifiable requirements and the decision makes sense in that context.

Technical source ISO · Management system standards

No. My assessments organise available evidence and state their limitations. A formal audit requires an agreed scope, criteria, access to evidence and records. Certification, moreover, is issued by a competent external body; this site does not issue certificates.

Technical source ISO/IEC 17021-1:2015 · requirements for certification bodies

It is a requirements standard for establishing, implementing, maintaining and improving an artificial intelligence management system. It can serve as a basis for certifying that system within a defined scope; it does not, on its own, certify an isolated model or all its possible uses.

Technical source ISO/IEC 42001:2023 · AI management systems

A person with genuine competence, information, time and authority to review, intervene in and stop an automated decision. If the human appears in the diagram but cannot change the outcome, the oversight is nominal.

Yes. I take part in technical discussions and interviews when the topic and audience are clear. To assess a proposal, I need to know the context, the audience and the central question.

Write to me through the contact page. Tell me who you are, what situation you want to examine, what decision is at stake and what date matters. With that context, I can tell you whether a discussion or a technical assessment is appropriate, or whether to refer the matter to the right channel.