iso42001-specialist
ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and which Annex A controls treat each risk? (3) What's the 12-month internal audit plan that satisfies Clause 9.2? Use when preparing for certification, scoping internal audit cycles, or onboarding AI systems into an existing ISMS (27001) / QMS (13485) program. NOT an executive AI strategy skill (see chief-ai-officer-advisor). NOT EU AI Act compliance (see compliance
Profile →npx skills add alirezarezvani/claude-skills --skill iso42001-specialist --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# ISO/IEC 42001 AI Management System Specialist Internal-audit-grade operating skill for ISO/IEC 42001:2023. **Three decisions, no executive AI strategy:** 1. **Where are the AIMS gaps against Clauses 4–10?** — coverage scoring per clause + remediation priority 2. **What's the AI risk register, and which controls treat each risk?** — Annex A.2–A.10 control mapping per ISO 23894 risk method 3. **What's the Clause 9.2 internal audit plan?** — 12-month schedule with scope, frequency, auditor independence checks This skill is **NOT a chief-ai-officer-advisor replacement**. CAIO decides whether to build/buy a model and what business risk to accept. This skill operates the management-system discipline that captures those decisions in audit-ready evidence. This skill is **NOT an EU AI Act compliance skill**. ISO 42001 is a voluntary management-system standard; EU AI Act is binding product-safety regulation. They overlap (a high-risk AI system per Article 6(2) of the AI Act typically requires the QMS in Article 17, which ISO 42001 can satisfy in part) but the artefacts differ. See `compliance-team-eu-ai-act` for Article-level conformity assessment. This skill is **NOT a substitute for ISO
- Keywords
- Quick Start
- Key Questions (ask these first)
- Core Responsibilities
- 1. AIMS Gap Analysis (Clauses 4–10)
- 2. AI Risk Register + Annex A Control Mapping
- 3. Clause 9.2 Internal Audit Plan
- Workflows
- Workflow 1: AIMS Gap Closure for Certification (4–8 weeks)
- Workflow 2: AI Risk Register Build (1–2 weeks)
- Workflow 3: Annual Internal Audit Plan (1 day)
- Workflow 4: Cross-Framework Reuse Mapping (per system onboarded)
- Output Standards
- Adjacent Skills
Decision A: AIMS gap analysis against Clauses 4-10 python scripts/aims_gap_analyzer.py # embedded sample (mid-stage AI SaaS) python scripts/aims_gap_analyzer.py path/to/aims_evidence.json Decision B: AI risk register + Annex A control mapping python scripts/ai_risk_register_builder.py # embedded 7-risk sample python scripts/ai_risk_register_builder.py path/to/risks.json Decision C: Clause 9.2 internal audit 12-month plan python scripts/aims_audit_scheduler.py # embedded 4-domain sample python scripts/aims_audit_scheduler.py path/to/scope.json python scripts/aims_gap_analyzer.py aims_evidence.json
What does the iso42001-specialist skill do?
ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and which Annex A controls treat each risk? (3) What's the 12-month internal audit plan that satisfies Clause 9.2? Use when preparing for certification, scoping internal audit cycles, or onboarding AI systems into an existing ISMS (27001) / QMS (13485) program. NOT an executive AI strategy skill (see chief-ai-officer-advisor). NOT EU AI Act compliance (see compliance
How do I install it?
Run `npx skills add alirezarezvani/claude-skills --skill iso42001-specialist --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From alirezarezvani/claude-skills, a repository with 23,791 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.