ISO/IEC 42001 — sample audit checklist
The first section rendered in full, plus the table of contents for the rest, watermarked SAMPLE. See exactly how the questions, evidence prompts and source text read before you buy. Free, no email required.
ISO 42001 is the first certifiable AI management system standard. Its clauses and Annex A controls are easy to wave at and hard to evidence one by one. A certification auditor samples them individually — so should your internal audit.
Why now
Pairs with the live EU AI Act checklist: 42001 gives you the management-system spine, the AI Act gives you the legal obligations. Questions cross-reference the AI Act Articles the AIMS supports.
What you get for €450
01
Every provision mapped
All 127 audit questions trace to a specific article, annex or clause of ISO/IEC 42001. Nothing is hand-waved: each provision is either covered by one or more questions or explicitly recorded as informational. The free Compliance Matrix proves it, line by line.
02
Built to survive scrutiny
Authored and reviewed by compliance management professionals with decades of regulatory experience, against a stated version of ISO/IEC 42001. Source text is reproduced verbatim per question, with suggested evidence inline — so an auditor (or a regulator) can follow every answer back to the regulation.
03
Hundreds of hours, ready Monday
The decomposition, evidence prompts and classification scheme are done. Five ready-to-use formats, delivered on payment, that drop straight into your audit process or your GRC tool — instead of months building a checklist from the raw regulation.
COMPLIANCE MATRIX — FREE, UNGATED
Every provision of ISO/IEC 42001, accounted for.
Before you spend a cent, download the Compliance Matrix. Every leaf of the regulation appears as a row, with its coverage status and the audit questions that map to it. It is the proof that this checklist is complete — and the artefact your own auditor can use to check the checker.
127
Audit questions
100%
Provisions accounted for
5
Artefact formats
12
Months of updates
Authored and reviewed by compliance management professionals. Reviewed against v2023-12-18; each Compliance Matrix states the exact version it was verified against.
See a sample first
Pricing
One regulation, one organisation, 12 months of updates included. A single invoice — not a subscription, nothing auto-debited.
Every amendment to ISO/IEC 42001 within your 12-month window is re-rendered against the new version and emailed to you automatically. When the 12 months end you keep every artefact you've downloaded — you simply stop receiving new amendments unless you renew.
| Licence | Price | What it covers |
|---|---|---|
| Single organisation | €450 | Use across your organisation, 12 months of updates, all five artefact formats plus the Compliance Matrix. |
Licensing for a group of separate legal entities? Contact us for group licensing.
What you'll receive
Five formats of the same reviewed content, covering the full ISO/IEC 42001, delivered by email the moment payment clears. Every amendment during your 12-month window is re-rendered and emailed automatically. Everything you download is yours to keep.
- 01 Audit Checklist The auditor's working document. Per-question blocks with a compliance state, four-state classification and finding-level boxes, the regulation source text verbatim plus suggested evidence inline, and a management-system reference field. Print-ready. PDF
- 02 Audit Checklist The same content as plain text. Diff it against last year's edition, drop it into Confluence / Notion / your internal wiki via pandoc, or feed it to internal review tooling. MD
- 03 Audit Workbook Multi-sheet workbook mirroring the PDF: cover, per-section sheets with dropdowns and conditional formatting, Findings Log, Cross-Reference Register and Dashboard. XLSX
- 04 Data Bank A flat one-row-per-question table. The universal format for upload into third-party audit and GRC software, or your own in-house tooling. Opens directly in Excel. CSV
- 05 Question Bank A lean structured schema: citation, regulatory hook, question text, classification options, severity, applicability. A stable XSD contract for structured ingestion into third-party audit and GRC software. XML