ISO 42001 TemplatesISO 42001 templates for your AI management system
Everything you need to build and evidence an ISO/IEC 42001 AI management system: the AI policy, AI inventory and risk register, impact and risk assessment, a 45-line gap assessment across clauses 4–10 and Annex A, and the audit evidence checklist.
Where are you now? Take the free 16-question readiness check below, one question per clause and Annex A area. Or go straight to the templates.
Runs locally · 0 bytes uploaded
Free ISO/IEC 42001 readiness check
ISO 42001 templates: AI Governance Toolkit
The Professional edition contains the full ISO/IEC 42001 gap assessment (45 lines, scored readiness by clause and Annex A area) and the audit evidence checklist; Starter has the policy, inventory, risk register and risk assessment every AIMS needs.
How ISO/IEC 42001 is structured
| Part | What it covers | Lines in the gap assessment |
|---|---|---|
| Clause 4 Context | Understanding the organisation, Interested parties, Scope, AI management system | 4 |
| Clause 5 Leadership | Leadership and commitment, AI policy, Roles and responsibilities | 4 |
| Clause 6 Planning | Risks and opportunities, AI risk assessment, AI risk treatment, Statement of Applicability, AI system impact assessment, AI objectives, Planning of changes | 7 |
| Clause 7 Support | Resources, Competence, Awareness, Communication, Documented information | 5 |
| Clause 8 Operation | Operational planning and control, AI risk assessment in operation, AI risk treatment in operation, AI system impact assessment in operation | 4 |
| Clause 9 Performance evaluation | Monitoring and measurement, Internal audit, Management review | 3 |
| Clause 10 Improvement | Continual improvement, Nonconformity and corrective action | 2 |
| Annex A.2 Policies related to AI | Control area | 2 |
| Annex A.3 Internal organisation | Control area | 1 |
| Annex A.4 Resources for AI systems | Control area | 1 |
| Annex A.5 Assessing impacts of AI systems | Control area | 2 |
| Annex A.6 AI system life cycle | Control area | 3 |
| Annex A.7 Data for AI systems | Control area | 2 |
| Annex A.8 Information for interested parties | Control area | 2 |
| Annex A.9 Use of AI systems | Control area | 1 |
| Annex A.10 Third-party and customer relationships | Control area | 2 |
Clause numbers and Annex A area names follow ISO/IEC 42001:2023; descriptions are our own. Buy the standard from ISO or your national standards body for the authoritative text.
Questions
What is ISO/IEC 42001?
The international standard for an AI management system (AIMS), published in 2023. It sets requirements for how an organisation governs the AI it develops, provides or uses, and it can be certified by an accredited body.
What documents does ISO/IEC 42001 need?
Typically an AIMS scope, an AI policy, an AI risk assessment method and results, a risk treatment plan and Statement of Applicability, AI system impact assessments, AI objectives, competence records, internal audit and management review records, and records of nonconformities and corrective actions.
Do these templates include the standard?
No. ISO/IEC 42001 is copyrighted by ISO; buy it from ISO or your national standards body. The templates follow its clause numbers and Annex A areas with our own wording.
Does buying the templates make us certified?
No. Certification is done by an accredited certification body after a Stage 1 and Stage 2 audit. The templates help you build and evidence the management system they will audit.