Skip to content
DPCert.org

Tools

Get AI governance audit-ready

From roles to evidence: set who answers for what, record the risks, measure the distance to ISO/IEC 42001 and plan the audit tests.

The flow

  1. Set roles with the RACI matrixWho is accountable, who does the work, who is consulted and who is informed for each AI governance activity, with warnings when a function is missing.AI governance RACI matrix
  2. Build the AI risk registerLikelihood, impact and controls for each risk, with bands, a heat map and links to the NIST AI RMF, the EU AI Act and the GDPR.AI risk register
  3. Run the ISO/IEC 42001 gap analysis32 checks across clauses 4 to 10 and the Annex A themes, with readiness, gaps and a roadmap.ISO/IEC 42001 gap analysis
  4. Plan the audit with the checklistFrom scope to work programme: tests per area, evidence by owner, priority and estimated effort.AI audit checklist