ISO 42001 template · ISO/IEC 42001
AI Data Governance Policy
Governs the acquisition, preparation, quality, lineage, and lifecycle management of data used in AI systems to ensure trustworthy AI outcomes. (ISO/IEC 42001: Annex A, A.10 Data for AI Systems) Written for your company, citing the controls below.
- Sections
- 8
- Controls cited
- 7
- Formats
- PDF, Word
- Shelf
- 8 ISO 42001documents in all
No card needed to start.
ISO 420018 sections
AI Data Governance PolicyGoverns the acquisition, preparation, quality, lineage, and lifecycle management of data used in AI systems to ensure trustworthy AI outcomes. (ISO/IEC 42001: Annex A, A.10 Data for AI Systems)
- Cites
- Cl. 8.1, Cl. 8.4, Cl. 7.5 and 4 more
- Formats
- PDF and Word
ISO 42001 shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Data Acquisition and Provenance
- Data Quality Requirements
- Bias Detection and Mitigation in Data
- Data Labeling and Annotation Standards
- Data Lineage and Traceability
- Privacy and Consent Management
- Data Retention and Disposal
Controls it cites
The ISO 42001 controls first, then the matching controls in other frameworks.
- Cl. 8.1Operational PlanningISO 42001
- Cl. 8.4AI System LifecycleISO 42001
- Cl. 7.5Documented InformationISO 42001
- GDPR Art. 5Principles of ProcessingGDPR
- GDPR Art. 25Data Protection by Design and DefaultGDPR
- ISO A.5.12Classification of InformationISO 27001
- CSF PR.DS-1Data at RestNIST CSF
- ISO 420018 sections
AI Impact Assessment Policy
CitesCl. 8.3 Cl. 6.1 GDPR Art. 35 +3 +4PDF · WordCites Cl. 8.3, AI System Impact Assessment (ISO 42001); Cl. 6.1, AI Risk Assessment (ISO 42001); GDPR Art. 35, Data Protection Impact Assessment (GDPR), and 3 more. - ISO 420017 sections
AI Transparency & Explainability Policy
CitesCl. 5.1 Cl. 7.5 Cl. 8.4 +3 +4PDF · WordCites Cl. 5.1, AI Policy (ISO 42001); Cl. 7.5, Documented Information (ISO 42001); Cl. 8.4, AI System Lifecycle (ISO 42001), and 3 more. - ISO 420018 sections
Human Oversight of AI Systems Policy
CitesCl. 8.1 Cl. 8.4 Cl. 9.1 +2 +3PDF · WordCites Cl. 8.1, Operational Planning (ISO 42001); Cl. 8.4, AI System Lifecycle (ISO 42001); Cl. 9.1, Monitoring AI Performance (ISO 42001), and 2 more. - ISO 420018 sections
AI Monitoring & Evaluation Policy
CitesCl. 9.1 Cl. 9.2 Cl. 9.3 +5 +6PDF · WordCites Cl. 9.1, Monitoring AI Performance (ISO 42001); Cl. 9.2, Internal Audit (ISO 42001); Cl. 9.3, Management Review (ISO 42001), and 5 more. - ISO 420018 sections
AI Incident Management Policy
CitesCl. 10.1 Cl. 8.2 SOC 2 CC7.3 +4 +5PDF · WordCites Cl. 10.1, Nonconformity (ISO 42001); Cl. 8.2, AI Risk Treatment (ISO 42001); SOC 2 CC7.3, System Operations: Incident Response (SOC 2), and 4 more. - ISO 420017 sections
AI Management System Policy
CitesCl. 5.1 Cl. 6.2 Cl. 7.5 +3 +4PDF · WordCites Cl. 5.1, AI Policy (ISO 42001); Cl. 6.2, AI Objectives (ISO 42001); Cl. 7.5, Documented Information (ISO 42001), and 3 more.
ISO 42001 on its own
- Documents
- 8
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so ISO 42001 + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.