iso-42001-aims-architect

What problem does it solve?

This Skill helps teams design an ISO/IEC 42001:2023-ready AI management system without confusing it with a single-feature risk review, an NIST AI RMF program, or an ISO 27001 security system. It turns scattered AI governance practices into a structured, auditable management system with scope, policy, assessments, evidence, and improvement loops.

Core Features & Use Cases

• AIMS Scope Design: Defines which AI systems are in scope and what role the organization plays for each system, such as developer, provider, or user.
• Three Distinct Assessments: Separates AI risk assessment, AI risk treatment, and AI system impact assessment so organizational risk is not mixed up with impacts on individuals and societies.
• Governance Mapping: Reuses existing controls and shipped artifacts like agent governance, lifecycle risk management, and per-feature AI reviews as operational inputs instead of rebuilding them.
• Compliance Readiness: Produces the artifacts needed for clause 4–10 readiness, internal audit planning, management review, and Annex A selection while keeping licensing constraints and verification items explicit.
• Use Case: A company selling an AI SaaS product in the EU can use this Skill to structure its ISO 42001 certification preparation and connect product reviews, governance evidence, and treatment decisions into one AIMS.

Quick Start

Ask for an ISO 42001 AIMS design for your organization, including AI scope, the three assessments, Annex A selection, and the evidence and review plan.