Download this resource
Please enter your details to access the download.
Before you engage a certification body, you need to know where you actually stand. This free ISO/IEC 42001:2023 readiness checklist gives you a fast, structured snapshot of your organization's AI governance maturity against the key requirements of the standard. Work through it with your team, identify your gaps, and go into your first certification conversation with clarity rather than guesswork.
The checklist covers all seven clause sections (Clauses 4 through 10) and the most critical Annex A controls. Each question includes a plain-English evidence guide so you know what to look for, not just what to ask.
It is designed for business owners, operations leads, and compliance managers preparing for ISO 42001 certification, not for technical teams conducting a deep clause-by-clause assessment. If you need the detailed analytical workbook, see the ISO 42001 Gap Analysis Tool.
What You Will Get
- A printable 7-page PDF readiness checklist covering 25 key ISO 42001 requirements
- Plain-English evidence guidance for every question
- A scoring guide that maps your result to a recommended next step
- A priority action plan table to record and assign your gaps
- Free, no subscription required
What the Checklist Covers
The checklist is organized into four sections that mirror the structure of ISO/IEC 42001:2023.
| Section | What It Covers |
|---|---|
| Section 1, Clauses 4 and 5 | Organizational context and leadership: AI policy, AIMS scope, interested parties, governance roles, and top management commitment. |
| Section 2, Clause 6 | Planning and objectives: AI risk assessment, AI system impact assessments, measurable AI governance objectives, and change control. |
| Section 3, Clause 8 and Annex A | AI system lifecycle and operations: AI system inventory, data governance, human oversight, bias and anomaly monitoring, transparency, and impact assessments. |
| Section 4, Clauses 9 and 10 | Performance, audit, and improvement: monitoring against objectives, internal audit programme, management review, incident management, and corrective action. |
For each question you will mark Yes, Partial, or No. A scoring guide at the front of the checklist maps your overall result to a plain-English readiness assessment and a recommended next step, from starting an AI system inventory at the low end to proceeding directly to a Stage 1 audit at the high end.
Who This Checklist Is For
- Business owners and senior leaders assessing whether their organization is ready to begin a formal ISO 42001 certification programme
- Operations, quality, or compliance managers preparing for an initial conversation with an accredited certification body
- Organizations already certified to ISO 27001 or ISO 9001 who want a quick read of how much additional work ISO 42001 certification requires
- Boards and leadership teams wanting a governance-level view of AI risk maturity without a full technical audit
Checklist or Gap Analysis Tool: Which Do You Need?
ISOCentral provides two distinct ISO 42001 assessment resources. They serve different purposes at different stages of the certification journey. Use the table below to find the right one for where you are now.
| ISO 42001 Readiness Checklist | ISO 42001 Gap Analysis Tool | |
|---|---|---|
| Format | Printable PDF, 7 pages | Downloadable workbook, multi-tab spreadsheet |
| Scoring | Yes / Partial / No per question | 0 to 3 weighted score per clause with auto-calculated maturity level |
| Depth | 25 key requirements across Clauses 4 to 10 and priority Annex A controls | Full clause-by-clause coverage including all Annex A controls A.2 through A.10 |
| Best For | Leadership and business owners assessing overall readiness | In-house compliance, risk, or IT teams conducting a detailed pre-implementation audit |
| Output | Readiness score with recommended next step and priority action table | Weighted maturity score, ranked gap priority list, and auto-populated action plan |
| Stage of Journey | Before engaging a certification body | Before beginning implementation, to map every gap systematically |
| Time to Complete | 30 to 60 minutes with your team | Half a day to a full day with relevant stakeholders |
Most organizations benefit from using both. Start with the gap analysis tool to map your implementation needs in detail, then use this readiness checklist closer to certification to confirm your preparation is complete.
ISO 27001 and ISO 9001 Holders: How Much Additional Work Is ISO 42001?
If you already operate a certified management system, much of the Clause 4 to 10 framework will feel familiar: context, leadership, planning, support, operation, performance evaluation, and improvement follow the same Annex SL structure. The material gap for most ISO 27001 holders is in Section 3: AI system inventory, impact assessments, human oversight documentation, data governance for AI, and transparency obligations. This checklist will quickly show you where to focus your remaining implementation effort.
How to Use Your Checklist Results
Total your Yes, Partial, and No responses, then convert them into an overall readiness percentage using the scoring guide on the front page of the PDF. The bands below indicate where you sit and what to do next.
- 0 to 30%: Early stage. Most foundations are not yet in place. Begin with leadership commitment, AI policy, and an AI system inventory before completing a detailed gap analysis ahead of formal implementation.
- 31 to 60%: Foundation in place but material gaps remain. Map your AI systems formally, complete impact assessments for each, and build the documentation framework. Certification is feasible within six to nine months.
- 61 to 80%: Strong foundations with targeted gaps, typically in the AI-specific Annex A controls. Focus on impact assessments, transparency documentation, and human oversight procedures. Certification is feasible within four to six months.
- 81 to 100%: Audit-ready. Confirm objective evidence is in place for every clause, complete an internal audit and management review, then engage an accredited certification body for Stage 1.
Related ISOCentral Resources