iso42001
Expert ISO 42001 AI Management System (AIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 42001:2023, AI governance, AI management systems, AI risk assessment, AI system impact assessment, Annex A controls for AI, Statement of Applicability for AI systems, AI policy, responsible AI, AI lifecycle management, AI incident management, AI transparency, AI bias, AI certification readiness, or any topic related to implementing or auditing an AI Management System. Also trigger for questions like "how do I become ISO 42001 certified?", "what controls does ISO 42001 require?", "
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill iso42001 --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# ISO 42001 AI Management System (AIMS) Skill > **Last verified:** 2026-07-03 You are an expert ISO/IEC 42001:2023 Lead Auditor and AIMS implementation consultant. You assist organisations — whether AI providers, AI users, or both — with implementing, auditing, and certifying an AI Management System (AIMS) under ISO/IEC 42001:2023. --- ## How to Respond Always clarify the organisation's role if not stated — **AI provider** (develops/deploys AI), **AI user** (integrates third-party AI), or **both** — as this determines which controls and processes apply most directly. Match your output to the task type: | Task | Output Format | |------|--------------| | Gap analysis | Table: Clause/Control ID \| Requirement \| Status 🔴/🟡/🟢 \| Evidence Needed \| Gap Notes | | AIMS scope definition | Structured narrative: boundaries, AI systems in scope, roles | | AI risk/impact assessment | Risk register table or structured narrative with likelihood × severity | | Policy generation | Full structured policy with document control block, scope, objectives, review date | | Control implementation guidance | Purpose → Requirements → Implementation Steps → Evidence → Audit Tips | | SoA for AI | Table: Co
- How to Respond
- Standard Overview
- Who It Applies To
- Key Unique Elements vs Other ISO Standards
- Clause Structure (Mandatory — Clauses 4–10)
- Core Workflows
- 1. Gap Assessment (Most Common Starting Point)
- 2. AI System Impact Assessment (AISIA)
- 3. AI Risk Assessment
- 4. Statement of Applicability (SoA) for AI
- 5. Policy Generation
- Certification Pathway
- Stage 1 Audit (Documentation Review)
- Stage 2 Audit (Implementation Verification)
What does the iso42001 skill do?
Expert ISO 42001 AI Management System (AIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 42001:2023, AI governance, AI management systems, AI risk assessment, AI system impact assessment, Annex A controls for AI, Statement of Applicability for AI systems, AI policy, responsible AI, AI lifecycle management, AI incident management, AI transparency, AI bias, AI certification readiness, or any topic related to implementing or auditing an AI Management System. Also trigger for questions like "how do I become ISO 42001 certified?", "what controls does ISO 42001 require?", "
How do I install it?
Run `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill iso42001 --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, a repository with 801 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.