ISO 42001 template · ISO/IEC 42001
AI Impact Assessment Policy
Establishes the process for conducting impact assessments on AI systems to evaluate potential effects on individuals, groups, and society. (ISO/IEC 42001: Annex A, A.3 AI System Impact Assessment) Written for your company, citing the controls below.
- Sections
- 8
- Controls cited
- 6
- Formats
- PDF, Word
- Shelf
- 8 ISO 42001documents in all
No card needed to start.
ISO 420018 sections
AI Impact Assessment PolicyEstablishes the process for conducting impact assessments on AI systems to evaluate potential effects on individuals, groups, and society. (ISO/IEC 42001: Annex A, A.3 AI System Impact Assessment)
- Cites
- Cl. 8.3, Cl. 6.1, GDPR Art. 35 and 3 more
- Formats
- PDF and Word
ISO 42001 shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Impact Assessment Triggers
- Assessment Scope and Dimensions
- Stakeholder Consultation
- Assessment Methodology
- Findings Review and Approval
- Remediation and Mitigation Planning
- Reassessment and Continuous Monitoring
Controls it cites
The ISO 42001 controls first, then the matching controls in other frameworks.
- Cl. 8.3AI System Impact AssessmentISO 42001
- Cl. 6.1AI Risk AssessmentISO 42001
- GDPR Art. 35Data Protection Impact AssessmentGDPR
- SOC 2 CC3.2COSO Principle 7: Risk IdentificationSOC 2
- CSF ID.RA-5Risk ResponseNIST CSF
- 800-53 RA-1Risk AssessmentNIST 800-53
- ISO 420017 sections
AI Transparency & Explainability Policy
CitesCl. 5.1 Cl. 7.5 Cl. 8.4 +3 +4PDF · WordCites Cl. 5.1, AI Policy (ISO 42001); Cl. 7.5, Documented Information (ISO 42001); Cl. 8.4, AI System Lifecycle (ISO 42001), and 3 more. - ISO 420018 sections
Human Oversight of AI Systems Policy
CitesCl. 8.1 Cl. 8.4 Cl. 9.1 +2 +3PDF · WordCites Cl. 8.1, Operational Planning (ISO 42001); Cl. 8.4, AI System Lifecycle (ISO 42001); Cl. 9.1, Monitoring AI Performance (ISO 42001), and 2 more. - ISO 420018 sections
AI Monitoring & Evaluation Policy
CitesCl. 9.1 Cl. 9.2 Cl. 9.3 +5 +6PDF · WordCites Cl. 9.1, Monitoring AI Performance (ISO 42001); Cl. 9.2, Internal Audit (ISO 42001); Cl. 9.3, Management Review (ISO 42001), and 5 more. - ISO 420018 sections
AI Incident Management Policy
CitesCl. 10.1 Cl. 8.2 SOC 2 CC7.3 +4 +5PDF · WordCites Cl. 10.1, Nonconformity (ISO 42001); Cl. 8.2, AI Risk Treatment (ISO 42001); SOC 2 CC7.3, System Operations: Incident Response (SOC 2), and 4 more. - ISO 420017 sections
AI Management System Policy
CitesCl. 5.1 Cl. 6.2 Cl. 7.5 +3 +4PDF · WordCites Cl. 5.1, AI Policy (ISO 42001); Cl. 6.2, AI Objectives (ISO 42001); Cl. 7.5, Documented Information (ISO 42001), and 3 more. - ISO 420018 sections
AI Risk Management Policy
CitesCl. 6.1 Cl. 8.2 Cl. 10.1 +5 +6PDF · WordCites Cl. 6.1, AI Risk Assessment (ISO 42001); Cl. 8.2, AI Risk Treatment (ISO 42001); Cl. 10.1, Nonconformity (ISO 42001), and 5 more.
ISO 42001 on its own
- Documents
- 8
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so ISO 42001 + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.