A labelled sample of the kit
Five rows from the register, rendered from the live record, plus the gap list, the evidence list and the plan page they feed. The paid kit carries all 38 control records, the full evidence list, the common gaps and the dated plan, as PDF, CSV and XLSX. This page is a sample: it is not your data and it is not the whole kit.
| Control | Requirement | First evidence item | Privacy overlay | Owner |
|---|---|---|---|---|
| A.2.2 | AI policy | Documented AI policy covering development and/or use of AI | Scope, role and who answers | Owner to assign |
| A.5.2 | AI system impact assessment process | Impact assessment procedure stating triggers (criticality of purpose, complexity and automation, data sensitivity, significant changes) | Evaluating the consequences | Owner to assign |
| A.6.2.8 | AI system recording of event logs | Logging decision per life cycle phase | Operating, monitoring and telling people | Owner to assign |
| A.7.5 | Data provenance | Provenance records covering creation, update, transcription, abstraction, validation, transfer of control, sharing and transformation | Treating the risk: data and third parties | Owner to assign |
| A.10.3 | Suppliers | Supplier selection and requirements process scaled to what each supplier provides and its risk | Treating the risk: data and third parties | Owner to assign |
The sample shows the shape, not the full wording. The owner column is blank in the kit because the owner is yours to assign. The full kit adds the other 33 records, the gap list, the evidence list and the dated plan to the publication estimate.
Six pages, labelled
The cover, five register rows, the gap list, the evidence list and the plan, with the specimen watermark.
USD 799 one off
38 control records, 101 evidence items, the dated plan and the overlay. The watch includes the same files while active.
The rules this is built from
Read from the real rules, not invented. The 38 control pages are the ISO/IEC 42001:2023 Annex A controls, read from the standards library: 101 evidence lines and 80 common failure lines, each cited to its control. The privacy layer is read from the public ISO/IEC FDIS 27091 record, the ISO abstract and the stage feed. The draft text is not public and is not reproduced.
ISO/IEC 42001:2023, Annex A
Each page states the control in our words, the evidence an auditor asks for, the common gaps and the privacy work the draft points at.
Open the control indexWhat the draft covers
Scope and role, the lifecycle, the evaluation of consequences, treatment, operation and evidence.
Read the public recordThe role and the four markets
Controller or processor, the lifecycle stages, and the instruments named for the US, EU, UK and Australia.
Open the referenceThe ISO/IEC FDIS 27091 text is not public and is not reproduced. The ISO/IEC 42001:2023 text is not reproduced either. Every source.