ISO 42001 Readiness Assessment

Answer the following questions honestly based on your organisation's current state. Each question focuses on a key requirement of ISO 42001.

1. Does your organisation have a documented AI governance policy?

Yes, comprehensive and regularly reviewed

Yes, but needs updating

Partial or informal policy only

No AI governance policy

2. Have you conducted a comprehensive inventory of all AI systems in use?

Yes, complete and up-to-date inventory

Partial inventory exists

Informal tracking only

No inventory

3. Do you have a systematic AI risk assessment process?

Yes, documented and regularly applied

Process exists but inconsistently applied

Ad-hoc risk assessments only

No AI risk assessment process

4. Are clear roles and responsibilities defined for AI governance?

Yes, roles clearly documented and assigned

Roles defined but not fully operationalised

Informal responsibilities only

No defined AI governance roles

5. Do you have data governance processes for AI systems?

Yes, comprehensive data quality, privacy and security controls

Basic data governance in place

Minimal or ad-hoc data controls

No AI-specific data governance

6. Are AI system decisions documented and auditable?

Yes, comprehensive logging and audit trails

Some documentation exists

Minimal documentation

No audit trails for AI decisions

7. Do you monitor AI system performance and impacts?

Yes, continuous monitoring with defined metrics

Periodic monitoring in place

Reactive monitoring only

No systematic monitoring

8. Is there a process for stakeholder engagement in AI governance?

Yes, structured engagement with relevant stakeholders

Some stakeholder consultation

Minimal stakeholder involvement

No stakeholder engagement process

9. Do you have an AI incident management and response process?

Yes, documented incident response plan with regular testing

Basic incident process exists

Reactive approach only

No AI incident management process

10. Is there a continuous improvement process for AI governance?

Yes, regular reviews and documented improvements

Periodic reviews conducted

Ad-hoc improvements only

No continuous improvement process

Your ISO 42001 Readiness Score

Based on 10 key ISO 42001 requirements

Next Steps

Book a Consultation Learn About ISO 42001