Tool · ISO/IEC 42001 self-assessment

Does your organisation manage its AI, or just use it?

Eight questions, an honest assessment. Estimate the level of AI management in your organisation and where to focus efforts first. It does not certify anything: it structures the conversation around evidence.

How it works

Each dimension corresponds to clauses and controls of ISO/IEC 42001:2023. Choose the level that best describes your organisation’s actual practice — what you could demonstrate, not what is on paper. At the end, the tool provides a result: score, estimated level and assessment by dimension.

The calculation takes place in your browser. No responses are sent or saved.

Level scale
  • 0 Non-existent — Not done or not known.
  • 1 Initial — Informal or isolated.
  • 2 Defined — Documented process.
  • 3 Managed — Consistent and measured.
  • 4 Optimised — Reviewed and improved.
0 of 8 answered
Clause 4 01 Context and scope

Has the organisation identified where and why it uses artificial intelligence, and defined the scope of its management?

Clause 5 · A.2 02 Policy and leadership

Is there an AI policy approved by management, with assigned roles and responsibilities?

Clause 6 · A.5 03 Risks and impact

Are the risks of each AI system and its impact on affected people assessed?

Annex A · A.7 04 Data for AI

Is the data that feeds AI governed: origin, quality, representativeness and biases?

Clause 8 · A.6 05 Life cycle

Is there documented control over the development, deployment, monitoring and retirement of AI systems?

Annex A · A.8 06 Transparency

Are people informed when they interact with AI and how its outputs are used?

Annex A · A.9 07 Human oversight

Is there effective human oversight of automated decisions that affect people?

Clauses 9–10 08 Performance and improvement

Is the AI management system measured, internally audited and improved based on evidence?

Tool factsheet

Scope
Eight dimensions mapped to clauses and Annex A controls of ISO/IEC 42001:2023. Score calculated by simple addition (0–32) with four interpretation bands.
What it does
Structures a perception-based self-assessment and returns it as a copyable summary: score, level, assessment by dimension and priorities.
What it does not do
It does not verify evidence, audit, certify or issue an opinion. It does not store or send responses: all calculations take place in your browser.
Built with
Static page with browser-based JavaScript, no external dependencies or first-party cookies.
Part of the tools index →
Next

After the self-assessment.

A score is not a diagnosis. The value lies in what is done about the gap between paper and practice.

Read Perspectives on AI A signed position on algorithmic governance. Understand ISO 42001 glossary What an AIMS, algorithmic governance and human oversight are. Discuss Write to me Send me your result with context and your objective.
WhatsApp G-CERTI