ISO 42001 · Preparation Kit

ISO 42001 AI Management System Readiness

ISO 42001 AI Management System certification preparation materials. For Vietnamese companies developing or integrating AI into their products.

Get pTrackly support →

1. Define AI scope and inventory

□ List all AI/ML systems in development or deployed
□ Classify by risk level: high-risk (hiring, credit, health) vs lower-risk
□ Identify AI intended purpose and potential misuse
□ Map data inputs, training data sources, outputs

2. AI Risk Assessment

□ Assess bias, fairness, discrimination risks per AI system
□ Safety risks: can AI decisions cause harm to people?
□ Privacy risks: how does AI process personal data?
□ Security risks: adversarial attacks, model poisoning, data leakage
□ Create AI Risk Register

3. AI Governance Framework

□ AI Policy: responsible AI use principles
□ Designate AI Responsible Officer or AI Ethics Committee
□ AI development lifecycle controls: from design to deployment
□ Human oversight mechanism: when must humans review AI decisions?
□ Transparency: document model limitations and known issues

4. Data Governance for AI

□ Training data quality: representativeness, accuracy, completeness
□ Consent for data used to train AI (PDPD/GDPR overlap)
□ Data provenance: track origin and lineage of training data
□ Model monitoring: detect drift, performance degradation

5. ISO 42001 Certification Audit

□ Complete AIMS (AI Management System) documentation
□ Internal audit AI controls per ISO 42001 Annex A
□ Stage 1: document review, policy, risk register, governance
□ Stage 2: on-site assessment, verify controls in practice
□ Select CB accredited by IAF member for ISO 42001

6. Overlap with other frameworks

□ ISO 27001: security controls for AI systems, reuse Annex A controls
□ GDPR/PDPD: AI processing personal data, right to explanation, automated decision-making
□ SOC 2: availability and confidentiality TSC apply to AI systems
□ HIPAA: AI in HealthTech must comply with PHI protections

pTrackly helps you implement ISO 42001 faster with ready-made templates and automated evidence collection.

pTrackly compliance platform

Turn compliance knowledge into work that gets done

Get step-by-step AI guidance, automated evidence collection, and live control status in one workspace.

See pTrackly Demo See how it works

In the call, we map your framework, system scope, and how pTrackly fits your current workflow.

Does not replace an independent auditor or certification body.