The timeline depends on how widely AI is used across the organization, how mature governance already is, how many stakeholders are involved, and whether the management system is being built from scratch or formalized around existing controls. Organizations with clearer ownership, stronger documentation, and defined approval processes usually move faster than those still relying on informal AI use across multiple teams. In most cases, ISO/IEC 42001 takes several months because the system needs to be defined, implemented, reviewed, and supported by evidence before certification activity begins.