Scope and responsibilities
Define the assessment boundary, responsible stakeholders and the decisions the review must support.
AI governance / ISO/IEC 42001 readiness
ISO/IEC 42001 readiness for UK and US organisations.
Turn your AI governance work into a clear readiness plan. SWSAM reviews the agreed scope, existing practices and supporting evidence against ISO/IEC 42001, then helps you prioritise what to address next.
Discuss your readiness scopeStart with the decision you need to make.
Use this assessment when you need a clearer view of your AI management system before investing in implementation or considering certification. It can also help organise existing governance work around a defined scope and a shared improvement plan.
Bring the AI services or use cases in scope, the teams responsible for them and the outcome you want the assessment to support.
What does ISO/IEC 42001 cover?
ISO/IEC 42001:2023 sets requirements for an organisational AI management system. It is relevant to organisations providing or using AI-based products and services.
Agree the scope. Review the evidence. Set priorities.
We begin by agreeing which organisational activities and AI systems the assessment covers, who needs to take part and what evidence is available.
We review the agreed governance practices and supporting records, identify gaps and distinguish missing evidence from work that still needs to be done. We then discuss priorities with the people responsible for implementation.
Practices and evidence
Review existing policies, ownership, risk processes and operational records within the agreed boundary.
Improvement priorities
Connect identified gaps to proposed actions, dependencies and the evidence needed to demonstrate progress.
A readiness review your teams can act on.
The agreed assessment provides four connected outputs. Their depth and coverage are set in the engagement scope.
Scope and evidence map
The agreed organisational boundary, reviewed material and areas requiring further evidence.
Readiness findings
Gaps linked to the relevant requirements and the evidence reviewed, with limitations recorded.
Prioritised action plan
Recommended actions, proposed owners, dependencies and evidence needed to assess progress.
Decision summary
A concise view of the main gaps and next decisions for business and technical stakeholders.
Prepare for a useful first conversation.
Share an overview of your AI use, existing governance work, stakeholders and target decision date. Describe any previous assessment and the evidence you can make available.
The timetable depends on the agreed boundary, access to evidence, stakeholder availability and the depth of review. We agree these before work starts.
Readiness, implementation and certification are separate decisions.
This service covers a scoped readiness assessment and improvement planning. Implementation, technical security testing, internal audits and any follow-up verification are agreed separately.
The assessment does not issue a certificate or guarantee a certification outcome. ISO explains that certification is voluntary and carried out by independent certification bodies. The standard does not replace applicable laws or regulations.
Make your next AI governance decision with clearer evidence.
Tell us which AI activities you want to assess and what the next decision needs to establish. We can discuss the scope, evidence and stakeholders needed for a readiness review.