JK
Back to Compliance

ISO/IEC 42001 compliance journey

A guided, step-by-step path to a certification-ready AI management system (AIMS). Complete each clause to close gaps and raise your coverage. Illustrative demo data.

40%coverage
Not started

0 of 7 clauses complete · 18 gaps remaining · started at 40%

  1. 1
    Clause 4

    Context of the organization

    Define the scope of your AI management system (AIMS) and identify the internal/external issues and interested parties relevant to your AI use.

    Produces: AIMS Scope Statement & Interested-Parties Register
    A.3 · Internal organizationA.8 · Information for interested parties
  2. Clause 5

    Leadership

    Publish the organizational AI policy, secure leadership commitment, and assign AI roles, responsibilities and accountabilities (RACI).

    Produces: AI Policy & Roles/Accountability (RACI) matrix
    A.2 · Policies related to AIA.3 · Internal organization
  3. Clause 6

    Planning

    Run AI risk assessments and AI system impact assessments across your inventory, and set measurable AI objectives to address risks and opportunities.

    Produces: AI Risk Register & AI System Impact Assessments
    A.5 · Assessing impacts of AI systems
  4. Clause 7

    Support

    Provision resources, establish competence and awareness for staff working with AI, and bring documented information under version control.

    Produces: Competence & Awareness records · Documented-Information index
    A.4 · Resources for AI systemsA.7 · Data for AI systems
  5. Clause 8

    Operation

    Implement operational controls, execute the risk treatment plan against open gaps, and record a Statement of Applicability over the Annex A controls.

    Produces: Risk Treatment Plan & Statement of Applicability (SoA)
    A.6 · AI system life cycleA.9 · Use of AI systemsA.10 · Third-party relationships
  6. Clause 9

    Performance evaluation

    Monitor and measure AIMS performance against your objectives, conduct an internal audit, and hold a management review.

    Produces: Internal Audit Report · Management Review minutes · KPIs
    A.6 · AI system life cycle
  7. Clause 10

    Improvement

    Log nonconformities, drive corrective actions to closure, and establish a continual-improvement loop for the AIMS.

    Produces: Nonconformity & Corrective-Action log · Improvement plan
    A.2 · Policies related to AI