What problem does it solve?
Compliance teams preparing for ISO/IEC 42001:2023 certification must manually score AIMS gaps against Clauses 4-10, map AI risks to Annex A controls, and build Clause 9.2 internal audit plans with auditor independence checks, which is slow and error-prone.
Core Features & Use Cases
- AIMS Gap Analysis: Score every Clause 4-10 requirement as documented, partial, or missing with severity-weighted coverage and a prioritized remediation list via aims_gap_analyzer.py.
- AI Risk Register Builder: Convert identified risks into a structured register with 5x5 severity scoring, Annex A control mapping, ISO 23894 treatment options, and residual-risk verdicts via ai_risk_register_builder.py.
- Internal Audit Scheduler: Generate a 12-month Clause 9.2 audit plan with quarterly scope, auditor assignments, independence conflict detection, and rolling 3-year coverage via aims_audit_scheduler.py.
- Use Case: A mid-stage AI SaaS company six weeks from its stage 1 certification audit runs the gap analyzer on its evidence inventory, finds critical gaps in Clauses 5.3 and 9.2, builds the risk register for its recommendation engine, and produces the annual audit plan in one working session.
Quick Start
Run the ISO 42001 gap analyzer on my AIMS evidence JSON and tell me which critical gaps block stage 1 certification.
