Use this ISO 42001 checklist to see how ready you are for certification and what's left to do. It follows the standard's requirements in the practical order you'd actually implement them. Part of our guide to ISO 42001 certification.
Two things make the whole programme easier: executive sponsorship (ISO 42001 needs top-management ownership) and a defined scope (which AI systems and processes the management system covers). Settle both first.
A checklist tells you what to do; certification needs evidence that you did it. As you work through each item, keep the records — assessments, minutes, the Statement of Applicability, audit results — because Stage 2 of the audit is an evidence review. See how to get ISO 42001 certified and the full requirements.
AramGRC runs this as a formal ISO/IEC 42001 gap assessment — scoring you against every requirement and Annex A control and handing you a prioritised, certification-ready roadmap, so the checklist becomes a plan.
A practical list of the steps to become ISO 42001-ready — scope, AI policy, inventory, risk and impact assessments, Annex A controls, internal audit and management review.
Define scope and get leadership sign-off, inventory and risk-assess your AI, implement the relevant Annex A controls, document everything, then run an internal audit before the certification body's audit.
A document that records which Annex A controls you've applied and why — a core ISO 42001 artefact the auditor reviews.
Yes — clause 9 requires an internal audit and a management review before certification, and doing them well is how you avoid surprises in the certification audit.
Start here — what ISO 42001 is, what it requires, costs, and how to get certified.
The world's first certifiable AI management system standard — requirements, Annex A controls, certification, cost, training and India relevance.
The standard explained in plain language.
The clauses and Annex A controls ISO 42001 asks for.
The 38 AI controls across 9 objectives (A.2–A.10), and how you select which apply.
What ISO 42001 certification costs, including in India.
A step-by-step readiness checklist for certification.
You're here
The mandatory policies, procedures and records — and what a good ISO 42001 toolkit includes.
How the AI and information-security standards differ.
The certification process, step by step.
Courses and credentials for individuals.
The role that builds and runs the AIMS — course, exam and how it differs from Lead Auditor.
DPDP Act, MeitY guidelines and RBI FREE-AI, mapped to one AIMS.
A standard, a voluntary framework and a law — how they fit together.
How smaller AI companies scope, cost and pursue certification proportionately.
Who is certifying, why the list is growing, and how to verify a certificate.