Patrick Sullivan On The Certifier’s View Of AI Standards And Regulation
AI Standards Stack #05
Podcast
Background:
In this episode, hosts Michael Mainelli and Adam Leon Smith welcome Patrick Sullivan, Vice President of Strategy and Innovation at A-LIGN, for a practical look at AI certification and ISO/IEC 42001. With over 25 years in IT security and compliance, and as an ISO committee member, Patrick explains what third-party certifiers actually do and how they provide objective assurance on AI management systems.
He addresses common misconceptions since 42001’s 2023 release, from early confusion with AI security standards to current misunderstandings about its link to the EU AI Act. Patrick highlights growing market demand, with major firms like Microsoft, Oracle and Anthropic earning certification and pushing it down supply chains, plus real value in risk management and investment confidence.
The discussion covers regional differences in AI governance, the skills needed for effective audits, implementation challenges for organisations of all sizes, and the urgent need for better guidance, especially around agentic AI. A grounded, certifier’s-eye view on turning the AI standards stack into real-world assurance.
Guest:
Patrick Sullivan is the Vice President of Strategy & Innovation at A-LIGN, a leading provider of cybersecurity and compliance solutions. With over 25 years of experience in IT security and compliance, he specialises in AI governance, cybersecurity, and regulatory frameworks. A certified security engineer and recognised expert in unified compliance frameworks, he is also a TEDx speaker and advisory board member dedicated to sharing best practices in security and innovation.
