42001INSTITUTE
Practitioner tools

Implementing AI: Tools You Can Use

Below is a set of tools you can use to help your team learn about AI, how to implement it, and how to assess its risk. Free to use, nothing to sign up for, and nothing you enter is stored or transmitted. Our goal is to help you learn and develop as you embark on your AI journey.

Eight tools · 3 to 10 minutes each · works on a phone

Risk · 3 minutes
Knowing Your High-Risk Systems
Assess one HR AI system against the EU AI Act, NYC Local Law 144, Colorado and Illinois. Get an indicative classification, a governance gap score, and the ISO/IEC 42001 controls to put in place first.
Assessment · 5 minutes
The Consequence Test
Six real HR scenarios. Decide which ones carry consequence for an identified person — because that, not how sophisticated the technology is, determines the risk tier.
Assessment · 7 minutes
What Can Generative AI Touch?
Sort everyday HR tasks into safe, needs controls first, and do not use a general model. The same tool changes category depending on what you point it at.
Risk · 5 minutes
Five Questions for Your Vendor
Answer five questions about an HR AI vendor and get a readiness verdict, plus the specific questions to send them before you renew.
Risk · 5 minutes
What Is This Metric Inferring?
Pick a people-analytics metric and see what it actually derives, which protected characteristics it may proxy, and what the standard requires you to document.
Maturity · 4 minutes
The Five Questions Every Leader Must Answer
Who owns it? Who could be harmed? Did we test it? Can we explain it? Who is watching it? Rate fifteen statements about a system you have already deployed and get a maturity level out of five — and the one question that is your weakest link.
Maturity · 8 minutes
Your 90-Day Governance Plan
Six questions about where your organization stands, mapped to ISO/IEC 42001 Annex A, producing a prioritized plan for the next ninety days.
Maturity · 10 minutes
ISO/IEC 42001 Readiness Assessment
How ready is your organization? Rate sixteen areas across the management system clauses and the Annex A controls, and see your readiness band, the gaps that block certification outright, and the three actions to take first.
These tools give indicative guidance based on your answers. They are not legal determinations, conformity assessments, or a substitute for advice from qualified counsel in the relevant jurisdiction. Regulatory requirements, effective dates, and enforcement practice change; verify current obligations before acting.