ISO 42001 readiness self-assessment

Ten questions, about three minutes, no email required. You’ll get a readiness score, your biggest gaps and a realistic timeline to certification.

1 of 10 · Scope

Do you keep a current inventory of the AI systems you build, embed or use (including third-party models)?

2 of 10 · Clause 5 / A.2

Do you have an approved AI policy that leadership has signed off?

3 of 10 · A.3

Is someone accountable for AI governance, with defined roles for AI system owners?

4 of 10 · Clause 6.1

Do you assess and record risks for each AI system, with a treatment plan?

5 of 10 · A.5

Do you assess the impact of your AI systems on individuals and society before release?

6 of 10 · A.7

Can you show where your training and evaluation data came from and how its quality is checked?

7 of 10 · A.6

Do model changes go through documented requirements, testing and release approval?

8 of 10 · A.10

Do you assess AI vendors and model providers, and define responsibilities in contracts?

9 of 10 · Clause 9

Do you monitor AI systems in production and log events and incidents?

10 of 10 · Foundation

Do you already hold ISO 27001 or SOC 2?