01
ISO 42001 readiness assessment
Work through ten themes and you'll get a ledger of where you stand and what to fix first.
This is a self-assessment. It is not an audit, is not certification, and is not legal advice.
ISO 42001 is an AI management system standard
The worksheet takes you through ten themes, labelled against Clauses 4 to 10, and asks how far your practice has got in each.
Each theme comes back as in place, partial or a gap, so you can see where internal work counts for most. It doesn't predict what an external assessment would conclude.
Download your readiness report as a PDF
The PDF is created in your browser. Your details are sent to us only if you ask for a walkthrough below.
The ten themes in the worksheet
Each clause number points to the part of the standard that theme relates to. Answering a theme does not map your organisation onto that clause's requirements.
02
The organisation's role for each AI system
03
Leadership accountability and an approved AI policy
04
AI objectives and the treatment of AI risks
05
The impact of AI on the people it affects
06
Competence, awareness and the AI literacy of staff
07
Documented operational controls for AI use
08
Data governance for the data AI systems use
09
Suppliers and third parties providing AI systems
10
Monitoring, internal audit, management review and improvement
What the result can tell you
Your gaps, ordered by what to fix first
Nothing drops off the ledger, and it records where you stood on the day you answered.
Where the worksheet stops
This is a self-assessment. It is not an audit, is not certification, and is not legal advice. It cannot tell you whether your evidence would satisfy an independent reviewer.
ISO 42001 and the EU AI Act answer different questions
This worksheet looks at how you manage AI internally. Whether the Act binds you turns on your reach into the EU and your role in each use of AI, which the EU AI Act check works through against Regulation (EU) 2024/1689, the Artificial Intelligence Act as amended by Regulation (EU) 2026/1744, the Digital Omnibus on AI.
Compare your risk planning with the Act timelineCheck where the Act may bind a UK organisationRead the AI literacy guide
Article 4 has applied since 2 February 2025.