ISO/IEC 42001 Readiness Diagnostic

A prioritised improvement plan linking governance evidence, gaps and audit-preparation dependencies.

Know where your AI management system stands before independent certification work, with prioritised improvements. Review readiness using the shared AI use-case register, accountable ownership, supplier reviews and improvement actions. The evidence review also covers relevant AI agent permissions and records.

What you receive

Discuss this starting point
Controls & Risk

For organisations considering independent ISO/IEC 42001 certification or needing a management-system structure for AI governance.

What we need to begin

  • A proposed AI management-system scope and an accountable sponsor.
  • Access to the AI inventory, existing management systems and relevant evidence.
  1. Management-system scope, ownership and shared AI use-case register

  2. Requirements-and-controls gap assessment with supplier evidence

  3. Prioritised improvement actions and audit-preparation dependencies

  4. Review of risk, impact, lifecycle, incident and evidence processes

AIMS implementation support

Translate the roadmap into policies, roles, controls, records, training, management-review routines, and corrective actions. The certification decision remains with an independent certification body.

How the work unfolds

  1. Agree the management-system scope and evidence request.

  2. Compare current practices and records with the requirements in scope. Include relevant agent authorisations, action logs, control tests and corrective-action records in the evidence review.

  3. Prioritise gaps, owners and dependencies for implementation and independent audit preparation.

Your team’s contribution

Process owners supply records and validate findings. Your management team owns the system and remediation decisions; technical and legal specialists validate their evidence.

Timing and review points

Timing follows the organisational scope, evidence availability and review stakeholders. Diagnostic and any implementation support are scoped separately.

How the fee is scoped

The proposal considers sites, AI portfolio, existing management systems, evidence depth and review rounds.

Where responsibilities sit

Readiness advice and implementation support do not confer certification. Ada Studio does not issue certificates, certify AI products or guarantee an audit result. The checks on AI agent permissions and records are Ada Studio’s evidence-review recommendations, not a list of prescribed ISO requirements.

Take a closer look

DOCX / PDFAI vendor review worksheetReview AI suppliers and AI agent permissions, total cost, activity evidence, revocation and exit before purchase.DOCX / PDFMonthly AI governance review agendaReview AI and AI agent changes, completed actions and control effectiveness; reassess before changed operation.DOCX / PDFAI use-case registerRecord AI uses and AI agent authority: owners, permitted actions, tool permissions, approvals and activity evidence.

Related insights

Bring the question you are working through.

Delivered by Adriana, who in March 2026 completed the AI4Gov Specializing Master in Artificial Intelligence for Public Services at Universidad Politécnica de Madrid and Politecnico di Milano, which jointly award its University Specializing Master Diploma. Her background combines application support, project coordination and team training. Meet Adriana

Discuss this starting point All services