Verigo Global
//ISO 42001 Toolkit
Implementation ToolkitISO/IEC 42001:2023

The ISO 42001 toolkit, ready to deploy.

A complete, practitioner-maintained document set — 18 policies, 16 procedures, and all 38 Annex A control templates — tailored to your AI systems so you build a certifiable AIMS without starting from a blank page.

Inside the toolkit
18
Approval-ready policies
16
Operational procedures
38
Annex A control templates
70+
Documents, checklists & samples
Overview

Everything the standard asks for — pre-built and tailored.

The Verigo ISO 42001 toolkit is the document backbone of a certifiable AI Management System. It pairs the management-system documentation required by Clauses 4–10 with implementation templates for every one of the 38 Annex A:2023 controls.

Each artefact is maintained by senior practitioners and tailored to your AI systems, industry, and risk appetite — then embedded into how you build and operate AI, the Compliance by Design way, so evidence is produced by the process itself.

Tailored, not generic

Every policy and procedure is shaped to your AI use cases, structure, and existing tooling — not a one-size-fits-all template dump.

Cross-framework ready

Controls are mapped so ISO 27001 evidence accelerates ISO 42001, and vice versa, without duplication.

Maintained for the 2023 edition

Aligned to ISO/IEC 42001:2023, including the full nine-objective Annex A structure.

Coverage

Wall-to-wall across the standard

The toolkit covers both halves of ISO 42001 — the management-system clauses and the full Annex A control set.

Management system · Clauses 4–10
4
Context
5
Leadership
6
Planning
7
Support
8
Operation
9
Performance
10
Improvement
Annex A:2023 · 38 controls, nine objectives
3

A.2 Policies for AI

2

A.3 Internal Organization

5

A.4 Resources for AI Systems

3

A.5 Impact Assessment

10

A.6 AI System Life Cycle

5

A.7 Data for AI Systems

4

A.8 Information for Interested Parties

3

A.9 Use of AI Systems

3

A.10 Third-Party & Customer Relationships

Toolkit contents

Browse the full set — and take it with you

Explore every policy, procedure, and control in the toolkit. Download any list as a branded PDF; we'll ask for a few details so a practitioner can tailor it to you.

Policy Library
The complete, framework-aligned AIMS policy set — 18 approval-ready policies covering Clauses 4–10 and every Annex A objective.
01
AI Management Policy
Top-level AIMS mandate, objectives, and management commitment to responsible AI.
02
AI Risk Management Policy
How AI-specific risk is identified, assessed, and treated across the lifecycle.
03
AI System Impact Assessment Policy
Assessing impacts of AI systems on individuals, groups, and society before deployment.
04
Data Governance Policy for AI
Sourcing, quality, provenance, and lifecycle handling of data used to train and operate AI systems.
05
Responsible AI Use Policy
Acceptable use, prohibited use cases, and human-oversight expectations for AI systems.
06
AI Fairness & Bias Policy
Identifying, measuring, and mitigating bias across training data, models, and outcomes.
07
Transparency & Explainability Policy
Disclosure obligations and explainability requirements for AI-driven decisions.
08
Human Oversight Policy
Defining where and how humans review, override, or intervene in AI system decisions.
09
AI Supplier & Third-Party Policy
Requirements for third-party models, datasets, and AI service providers.
10
AI System Lifecycle Policy
Governance across design, development, verification, deployment, and retirement of AI systems.
11
Model Monitoring & Drift Policy
Ongoing performance monitoring and thresholds for retraining or decommissioning.
12
Incident Management Policy (AI)
Detecting, reporting, and responding to AI-specific incidents and near-misses.
13
AI Roles & Responsibilities Policy
Accountability structure across the AI lifecycle, from sponsor to model owner.
14
Data Protection & Privacy Policy
Lawful handling of personal data used in AI training, inference, and evaluation.
15
Competence & Awareness Policy (AI)
Skills, training, and awareness requirements for staff who build or operate AI systems.
16
Change Management Policy (AI Systems)
Controlled changes to models, prompts, pipelines, and production AI configurations.
17
Third-Party & Customer Communication Policy
What is disclosed to customers and partners about AI system use and limitations.
18
Compliance Policy (AI Regulation)
Meeting applicable legal, regulatory, and contractual AI obligations, including emerging AI law.
Samples

See exactly what you'll receive

Representative pages from the toolkit — a policy, a procedure, a control template, and an audit-readiness checklist.

Want the full sample?

Preview the complete package index as a branded PDF — we'll ask for a few details first.

Samples are illustrative. Delivered documents are tailored to your organization and branding.

POL-06 · AI Fairness & Bias Policy

AI Fairness & Bias Policy

Classification
Internal
Version
1.0
Owner
Head of Responsible AI
Framework
ISO/IEC 42001:2023
1.0Purpose
This policy establishes requirements for identifying, measuring, and mitigating bias across training data, models, and outcomes in support of Annex A controls A.7.2–A.7.6 and A.9.2–A.9.4.
2.0Scope
Applies to all AI systems developed, procured, or operated by the organization, across every business unit and region.
3.0Policy statements
  • Every AI system undergoes a documented fairness review before production deployment.
  • Bias testing is repeated whenever training data or the model materially changes.
  • Disparate-impact findings are logged, risk-rated, and remediated before release.
  • High-risk AI systems require sign-off from the Responsible AI review board.
4.0Roles & responsibilities
Model owners run fairness testing; the Responsible AI review board approves high-risk releases; the Head of Responsible AI owns this policy and its annual review.
5.0Review
Reviewed annually or upon significant change. Next review: 12 months from approval.
Packages

Buy the toolkit, or the whole journey

Start with the ready-made document set and scale up to fully managed implementation. Every package is a fixed scope with a clear price — no surprises.

Starter
$1,595

The complete document toolkit, ready to deploy.

Teams driving their own ISO 42001 implementation.
  • All 18 policies, 16 procedures & 38 Annex A control templates
  • Editable source files (Word & Excel)
  • Statement of Applicability & AI risk assessment templates
  • Audit-readiness checklists
  • 12 months of content updates
  • Email support
Most popular
Professional
$5,250

The toolkit tailored to you, with practitioner guidance.

Organizations that want the toolkit shaped to their AI use cases.
  • Everything in Starter
  • Documents tailored to your AI systems & industry
  • Half-day kickoff & gap-review workshop
  • Online readiness self-assessment
  • Cross-framework control mapping to ISO 27001
  • Named practitioner with scheduled check-ins
  • Priority support
Enterprise
from$12,900

End-to-end implementation, all the way to certified.

Multi-model or multi-entity AI programs targeting certification.
  • Everything in Professional
  • Hands-on implementation support
  • Stage 1 & Stage 2 pre-audit preparation
  • Internal audit as a service
  • Multi-entity / multi-model rollout
  • Unlimited tailoring & review cycles
  • Dedicated delivery team

Prices shown are indicative. Add implementation support, pre-audit prep, and more when you configure your package.

Take the standard package

Grab the complete, ready-made toolkit as-is — 72 documents across policies, procedures, and all 38 Annex A controls. Download the full index now.

Customize your package

Build exactly what your AI program needs — start from any tier, then add implementation support, pre-audit prep, internal audit, and more. See your total update live.

Online evaluation · ~10 minutes

Know where you stand before you start.

Our online ISO 42001 readiness evaluation measures your current AI governance maturity and maps every gap straight to the toolkit documents that close it. Get your score in about ten minutes.

01

Answer ~28 questions

Scoped to the ISO 42001 clauses and Annex A objectives — about 10 minutes.

02

Get your readiness score

An instant maturity score with a gap heat-map across your AI governance themes.

03

See your next steps

A prioritized action plan showing exactly which toolkit documents close each gap.