AI Boss Tools | Diagnostic 14 • Back to the Hub
Frameworks describe functions; auditors ask for artefacts. This checklist scores the twelve documents an auditor, insurer, or enterprise customer will ask to see, drawn from ISO/IEC 42001 and the NIST AI RMF: the policy, the owner, the inventory, the controls, the training, and the evidence. You get a scored report showing what is missing and what to build first.
Sources: ISO/IEC 42001:2023 (the first international AI management system standard; the clause structure this checklist follows); EU AI Act, Article 4 (the AI literacy duty in force since 2 February 2025); IBM Cost of a Data Breach 2025 (63 percent of organisations have no AI governance policy).