Readiness checks / ISO 42001 · AI governance

How ready is your AI governance?

Eight questions, about two minutes. Answer honestly: "Partly" counts for half.

01Have you defined the scope of your AI management system: which AI systems, uses and teams it covers?
02Is there an approved AI policy, with an accountable executive and defined AI roles?
03Do you run a documented AI risk assessment covering bias, safety, privacy and security?
04Do you assess the impact of each AI system on individuals and society before it goes live?
05Do you have a Statement of Applicability covering the Annex A controls?
06Is the data used by your AI systems documented for source, quality and permitted use?
07Do you control third-party AI, including vendors, APIs and generative AI tools staff use?
08Do you monitor AI systems in operation and review the AI management system through internal audit?

Other readiness checks

A quick indication, not an audit or certification opinion. Completed checks are counted anonymously (the check, your answers and your country); nothing that identifies you is stored unless you choose to contact me.