ISO 42001 AI Management System Toolkit
A bespoke implementation playbook for ISO/IEC 42001:2023, the AI management system standard, prepared by Gerard Blokdyk for your role and situation after you buy. Access within 24 hours.
With the EU AI Act high-risk requirements now applying from 2 December 2027 (Annex III systems) and 2 August 2028 (AI in regulated products), as amended by Regulation (EU) 2026/1744, ISO 42001 certification is increasingly recognized as the practical pathway to regulatory compliance. The playbook gives you the documents to implement ISO 42001 and show AI governance readiness.
What Is in the Playbook
Typically around 65 files in 13 numbered folders, with a README that maps every file. Excel workbooks (about 60 percent) and PDF guides (about 40 percent). It opens with a START HERE guide. Exact file names and the mix inside each folder vary with your role and situation; the folders do not.
- 00 Platinum Tier - a master playbook for ISO 42001, a 90-day roadmap, an executive briefing, an objection handler and a master dashboard
- 01 Getting Started - how the playbook is organised and where to begin
- 02 Self-Assessment and Diagnostics - a maturity model and a diagnostic scorecard
- 03 Requirements and Goal Setting - planning templates such as stakeholder analysis, requirements and RACI matrices
- 04 Models and Frameworks - the core models of the topic with supporting decision trees and comparison matrices
- 05 Project Management Forms - implementation templates and checklists
- 06 Processes and Execution - working templates, checklists, runbooks and interview scripts
- 07 Performance and KPIs - a KPI framework and dashboard templates
- 08 Quality and Governance - compliance and audit checklists and a risk register
- 09 Sustainment and Improvement - continuous-improvement plans and a retrospective guide
- 10 Advanced Topics - case studies and scenario exercises
- 11 Reference and Quick Cards - a glossary and quick-reference sheets
- 12 Standard Operating Procedures - step-by-step SOPs for the key process areas
Built from Real Framework Data
Cross-framework mappings sourced from our compliance knowledge graph with 1,159 frameworks and 315,048 cross-framework mappings. Not generic templates. Actual control references to EU AI Act articles and NIST AI RMF categories.
Who This Is For
- AI Officers and AI Governance leads preparing for ISO 42001 certification
- CISOs and CTOs building AI governance programs
- Compliance teams implementing EU AI Act requirements via ISO 42001
- Consulting firms advising clients on AI governance and responsible AI
- Organizations with high-risk AI systems under EU AI Act Annex III
Why ISO 42001 Matters Now
ISO 42001 addresses approximately 70-80% of EU AI Act high-risk requirements. Organizations pursuing certification cover risk management, data governance, documentation, transparency, human oversight, and security in a single management system. With the high-risk deadlines now set at 2 December 2027 and 2 August 2028, there is time to build an ISO 42001 management system before they apply.
Free AI Act readiness assessment: Take the 5-minute assessment
Need strategic advisory? Book a 90-minute session with Ivanka Menken