Contents
What's in the package?
A curated set of 78+ documents covering the full scope of ISO/IEC 42001 — policies, procedures, registers and records, grouped into four implementation packs. Plus an Excel self-assessment for your gap analysis.
Policies, procedures, registers & records
All in .docx, with a consistent structure, headings and placeholders. Replace [organisation], [scope] and [owner] and you're off.
Self-assessment for all controls
Score per control, automatic heatmap, gap analysis and a priority overview. One file to track your progress.
Document types
The toolkit uses consistent naming. Each abbreviation refers to a document type:
Pack 1
AIMS Governance & System Foundation
Scope, policy, roles and the core registers of the management system.
RGI-AIMS-GDE-00GuideTemplate Kit Index & Customer User Guide
ISO ref: All clauses
RGI-AIMS-MAP-01MapISO 42001 Compliance Matrix
ISO ref: Clauses 4–10; Annex A
RGI-AIMS-MAN-01ManualAIMS Manual & Process Map
ISO ref: 4.4; 5; 8; 9; 10
RGI-AIMS-CTX-01ContextAIMS Context & Scope Statement
ISO ref: 4.1; 4.3
RGI-AIMS-REG-01RegisterStakeholders & Requirements Register
ISO ref: 4.2; 7.4; A.8
RGI-AIMS-REG-02RegisterLegal & Regulatory Obligations Register
ISO ref: 4.1; 4.2; 6.1; A.8.5
RGI-AIMS-POL-01PolicyAI Policy
ISO ref: 5.2; A.2.2; A.2.4
RGI-AIMS-MAT-01MatrixPolicy Alignment Matrix
ISO ref: A.2.3
RGI-AIMS-REC-09RecordAI Policy Review Record
ISO ref: A.2.4; 5.2; 9.3
RGI-AIMS-TPL-02TemplateAI Roles & Responsibilities / RACI
ISO ref: 5.3; A.3.2
RGI-AIMS-PRO-01ProcedureAI Concerns Reporting Procedure
ISO ref: A.3.3; A.8.3; 10.2
RGI-AIMS-OBJ-01ObjectivesAI Objectives & KPI Tracker
ISO ref: 6.2; 9.1; A.6.1; A.9.3
RGI-AIMS-PRO-02ProcedureDocumented Information Control Procedure
ISO ref: 7.5.1–7.5.3
RGI-AIMS-REG-03RegisterDocument Register & Retention Periods
ISO ref: 7.5.3; A.5.3; A.6.2.8
RGI-AIMS-PLN-01PlanAIMS Communication Plan
ISO ref: 7.4; A.8.4; A.8.5
RGI-AIMS-REG-04RegisterAI System Register
ISO ref: 4.4; 8.1; A.4; A.9.4
RGI-AIMS-REG-05RegisterAI Tool Register
ISO ref: A.9.2; A.9.4; A.10.3
Pack 2
Risk, Impact & Applicability
Risk criteria, risk and impact assessment, and the Statement of Applicability.
RGI-AIMS-PRO-03ProcedureAI Risk Assessment Procedure
ISO ref: 6.1.1; 6.1.2; 8.2
RGI-AIMS-TPL-03TemplateAI Risk Criteria & Risk Appetite Statement
ISO ref: 6.1.1
RGI-AIMS-REG-06RegisterAI Risk Register
ISO ref: 6.1.2; 8.2
RGI-AIMS-REG-07RegisterAI Opportunities Register
ISO ref: 6.1.1; 10.1
RGI-AIMS-PLN-02PlanAI Risk Treatment Plan
ISO ref: 6.1.3; 8.3
RGI-AIMS-REC-01RecordResidual AI Risk Acceptance Form
ISO ref: 6.1.3; 8.3
RGI-AIMS-SOA-01SoAStatement of Applicability (SoA)
ISO ref: 6.1.3; Annex A
RGI-AIMS-PRO-04ProcedureAI Impact Assessment Procedure
ISO ref: 6.1.4; 8.4; A.5.2
RGI-AIMS-TPL-04TemplateAI Impact Assessment Template
ISO ref: 6.1.4; 8.4; A.5.3–A.5.5
RGI-AIMS-REC-02RecordRisk & Impact Review Record
ISO ref: 8.2; 8.4; 9.1
Pack 3
AI System Lifecycle, Data & Operational Controls
From use case to decommissioning: design, V&V, deployment, data and monitoring.
RGI-AIMS-PRO-05ProcedureAI System Life Cycle Procedure
ISO ref: 8.1; A.6.1; A.6.2
RGI-AIMS-PRO-06ProcedureAIMS & AI System Change Management Procedure
ISO ref: 6.3; 8.1; A.6.2.6
RGI-AIMS-REG-15RegisterChange Request & Change Log
ISO ref: 6.3; 8.1; A.6.2.6
RGI-AIMS-REG-12RegisterAI Resource Register
ISO ref: 7.1; A.4.2–A.4.6
RGI-AIMS-TPL-05TemplateAI Use Case Intake & Approval Form
ISO ref: 8.1; A.6.2.2; A.9.4
RGI-AIMS-TPL-06TemplateAI System Requirements Specification
ISO ref: A.6.2.2
RGI-AIMS-TPL-07TemplateResponsible AI Development Objectives Tracker
ISO ref: A.6.1.2; A.6.1.3
RGI-AIMS-TPL-08TemplateAI System Design & Architecture Documentation
ISO ref: A.6.2.3; A.6.2.7
RGI-AIMS-PLN-03PlanVerification & Validation Plan
ISO ref: A.6.2.4
RGI-AIMS-REC-03RecordVerification & Validation Report
ISO ref: A.6.2.4; 8.1
RGI-AIMS-PLN-04PlanDeployment Plan & Go-Live Approval
ISO ref: A.6.2.5; A.6.2.7
RGI-AIMS-TPL-10TemplateAI System Technical Documentation Pack
ISO ref: A.6.2.7; A.8.2; A.8.5
RGI-AIMS-TPL-11TemplateModel Card / Model Documentation
ISO ref: A.4; A.6.2.7; A.7
RGI-AIMS-TPL-12TemplateEvent Logging Specification & Log Review Record
ISO ref: A.6.2.8; A.9.4
RGI-AIMS-PLN-05PlanAI System Monitoring Plan & KPI Register
ISO ref: 9.1; A.6.2.6
RGI-AIMS-REC-04RecordAI System Monitoring Review Record
ISO ref: 9.1; A.6.2.6
RGI-AIMS-POL-06PolicyData Governance Policy for AI
ISO ref: A.7.2–A.7.6
RGI-AIMS-REG-08RegisterDataset Register / Data Inventory
ISO ref: A.4.3; A.7.2
RGI-AIMS-TPL-13TemplateData Acquisition & Selection Record
ISO ref: A.7.3
RGI-AIMS-TPL-14TemplateData Provenance Log
ISO ref: A.7.5
RGI-AIMS-TPL-15TemplateData Quality Assessment
ISO ref: A.7.4
RGI-AIMS-TPL-16TemplateData Preparation Record
ISO ref: A.7.6
RGI-AIMS-TPL-17TemplateBias & Fairness Assessment Record
ISO ref: A.5; A.7.4; A.9.3
RGI-AIMS-POL-07PolicyAI Acceptable Use Policy
ISO ref: A.9.2; A.9.3; A.9.4
RGI-AIMS-PLN-06PlanResponsible Use Objectives & Human Oversight Plan
ISO ref: A.9.3; A.9.4
RGI-AIMS-REC-05RecordIntended Use and Human Oversight Record
ISO ref: A.9.4; A.8.2
RGI-AIMS-TPL-18TemplateUser Information / AI Transparency Notice
ISO ref: A.8.2; A.8.5
RGI-AIMS-PRO-12ProcedureAI Decommissioning Procedure
ISO ref: A.6.2.6; 8.1
RGI-AIMS-REC-06RecordDecommissioning Closure Certificate
ISO ref: 8.1; A.6.2.6
Pack 4
Assurance, Suppliers & Continuous Improvement
Third-party, incidents, audit, management review and CAPA.
RGI-AIMS-PRO-08ProcedureThird-Party AI Risk Management Procedure
ISO ref: 8.1; A.10.2–A.10.4
RGI-AIMS-TPL-19TemplateVendor AI Questionnaire & Evaluation Form
ISO ref: A.10.3; A.4; A.7
RGI-AIMS-REG-09RegisterThird-Party AI Register
ISO ref: A.10.2; A.10.3
RGI-AIMS-MAT-02MatrixSupplier/Partner/Customer Responsibility Matrix
ISO ref: A.10.2; A.10.4
RGI-AIMS-REG-10RegisterCustomer Requirements & Expectations Register
ISO ref: 4.2; A.10.4
RGI-AIMS-PRO-09ProcedureAI Incident Response Procedure
ISO ref: A.8.4; 8.1; 10.2
RGI-AIMS-REG-11RegisterAI Incident Register
ISO ref: A.8.4; 9.1; 10.2
RGI-AIMS-PLN-07PlanIncident Communication Plan
ISO ref: A.8.4; A.8.5; 7.4
RGI-AIMS-REC-07RecordPost-Incident Review Report
ISO ref: 10.2; 9.3
RGI-AIMS-PRO-10ProcedureAI Monitoring & Review Procedure
ISO ref: 9.1; 9.2; 9.3; A.6.2.6
RGI-AIMS-TPL-21TemplateCompetence Matrix & Training Plan
ISO ref: 7.2; 7.3; A.4.6
RGI-AIMS-REC-08RecordTraining & Awareness Record
ISO ref: 7.2; 7.3
RGI-AIMS-AUD-01AuditInternal Audit Programme
ISO ref: 9.2.2
RGI-AIMS-AUD-02AuditInternal Audit Plan
ISO ref: 9.2.2
RGI-AIMS-AUD-03AuditISO 42001 Internal Audit Checklist
ISO ref: 9.2; Annex A
RGI-AIMS-AUD-04AuditInternal Audit Report
ISO ref: 9.2.2
RGI-AIMS-REG-13RegisterAudit Findings Register
ISO ref: 9.2; 10.2
RGI-AIMS-MGT-01Mgmt reviewManagement Review Agenda & Minutes
ISO ref: 9.3.1–9.3.3
RGI-AIMS-REG-14RegisterManagement Review Action Log
ISO ref: 9.3.3; 10.1
RGI-AIMS-PRO-11ProcedureNonconformity & Corrective Action Procedure
ISO ref: 10.2
RGI-AIMS-REG-16RegisterCAPA Register
ISO ref: 10.2
RGI-AIMS-REG-17RegisterContinual Improvement Register
ISO ref: 10.1; 9.3
Ready to start using these documents?
One-time €199 — instantly downloadable.