ISO 42001
AI management system workspace - controls, policies, evidence, tasks, and roadmap for ISO/IEC 42001.
Where it lives
Sidebar → Compliance → Frameworks → ISO 42001 (/frameworks/iso42001)
ISO 42001 is Atlas's AI management system (AIMS) framework. Use it alongside AI Governance for day-to-day AI inventory and risk, and this workspace for audit-ready control tracking.
In-page tabs
Same structure as other active frameworks:
Control readiness KPIs, theme breakdown, and integration-fed evidence counts when AWS, GCP, or GitHub is connected.
ISO 42001 clauses and requirements mapped to Atlas controls.
Implementation status, owners, and notes per control.
Policies linked to ISO 42001 - sourced from the central Policies & Standards library.
Attachments and integration snapshots (for example AI inventory sync dated exports on A.4, A.6, A.9, A.10).
Implementation tasks tied to ISO 42001 controls and shared MTIDs.
Phased implementation plan for remaining gaps.
Integration evidence
When cloud or GitHub connectors sync, Atlas stores dated evidence snapshots on mapped controls - for example:
| Control area | Typical snapshot content |
|---|---|
| A.4 - Resource documentation | AI system inventory counts by provider |
| A.6 - AI system life cycle | GitHub Copilot seat and org policy posture |
| A.9 - Data for AI systems | Cloud AI service usage and principals |
| A.10 - Third-party relationships | Vendor and SaaS AI dependencies |
View snapshots in the Evidence tab via the integration evidence panel.
Getting started
Enable the framework
Select ISO 42001 during onboarding or activate it on the Frameworks catalog.
Connect integrations
Link AWS, GCP, and/or GitHub so AI inventory and snapshots populate automatically.
Review AI Governance
Triage AI Governance inventory and risks weekly.
Attach policies and evidence
Approve policies in Policies & Standards and attach proof in this workspace's Evidence tab.
Shared master tasks (MTIDs) link ISO 42001 work to SOC 2 and ISO 27001 where controls overlap. See Cross-Framework.