← All tools
Readiness Assessment
How ready is your organization for ISO/IEC 42001?
This tool helps you see where you stand against the ISO/IEC 42001 AI management system. Rate each of the sixteen areas honestly, then look at your results. If your score is lower than you expected, that is useful to know — and we are here to help.
Part A · 7 areas · 21 points
Management system — Clauses 4–10
Clause 4
Context of the organization
Scope defined, interested parties identified, AIMS established
Clause 5
Leadership
AI policy owned at the top; roles and accountability assigned (5.3)
Clause 6
Planning
Risk assessment (6.1.2), treatment (6.1.3), impact assessment (6.1.4), objectives (6.2)
Clause 7
Support
Competence, awareness, documented information (7.5)
Clause 8
Operation
Operational and change controls (8.1) running in practice
Clause 9
Performance evaluation
Monitoring, internal audit (9.2), management review (9.3)
Clause 10
Improvement
Nonconformity and corrective action (10.2)
Part B · 9 areas · 27 points
Annex A control domains — A.2–A.10
A.2
Policies related to AI
AI-specific policies ratified and reviewed
A.3
Internal organization
Roles and responsibilities for AI defined beyond IT
A.4
Resources for AI systems
AI system inventory; data, tooling, computing and human resources documented
A.5
Assessing impacts of AI systems
Impacts on individuals and society assessed per system
A.6
AI system life cycle
Requirements, verification and validation, deployment, monitoring, logging
A.7
Data for AI systems
Data acquisition, quality, provenance, preparation managed
A.8
Information for interested parties
User documentation, external reporting, incident communication
A.9
Responsible use of AI systems
Processes and objectives for responsible use; intended use defined
A.10
Third-party and customer relationships
Responsibilities allocated across suppliers and customers
The scale
0
Nothing in place
1
Started or partial
2
In place, thin evidence
3
In place and evidenced
Indicative guidance only, based on your answers. Not a legal determination, a conformity assessment, or a substitute for advice from qualified counsel in the relevant jurisdiction. Regulatory requirements, effective dates, and enforcement practice change; verify current obligations before acting. Nothing you enter here is transmitted or stored.