Free executive playbook · PDF · 10 pages

AI Governance, Risk Exposure and ISO 42001 Readiness Playbook

See where AI is used across your organization, size the exposure and know exactly what to put in place for ISO/IEC 42001 and NIST AI RMF aligned governance. Built for executives, risk owners and compliance leaders.

  • An 18-point self-check you can complete in 10 minutes
  • A clause-by-clause ISO/IEC 42001 readiness map
  • A practical 90-day roadmap and evidence checklist

Get the playbook in your inbox

We email the PDF to your work address.

We use your details to send the playbook and, if you opt in, related insights. See our privacy policy.

What is inside

18-point AI governance self-check

Yes / Partly / No questions across leadership, risk, lifecycle, shadow AI, vendors, data, oversight and monitoring, with scoring bands.

AI risk exposure picture

The six exposure areas we see most often, what they look like in practice and their consequences.

ISO/IEC 42001 readiness map

Clauses 4 to 10 in plain language, mapped to the self-check and to the evidence an auditor expects.

NIST AI RMF and EU AI Act at a glance

Which questions prepare you for GOVERN, MAP, MEASURE and MANAGE, and for high-risk AI obligations.

90-day readiness roadmap

Visibility, classification, control and assurance phases with concrete outcomes.

The evidence pack checklist

The nine evidence categories to have current, attributable and retrievable.

From self-check to operating governance

Score the same questions in the free AI Readiness and Governance Assessment, then run governance day to day in Smart RMOS: you upload your evidence and the platform identifies, classifies and maps it to controls, and surfaces gaps for your team to act on.

Guidance only. Not legal advice and not a certification; ISO/IEC 42001 certification is issued only by accredited certification bodies.