"We have an AI policy, so we have governance."
A policy is one part.
"ISO 42001 is mainly for AI developers."
It is for organisations that develop, provide or use AI.
"An AI inventory means we're covered."
An inventory shows what exists.
"Certification means no AI incident will happen."
Certification looks at the management system.