Skip to content
Colleagues reviewing plans and evidence at a desk

Know where you stand before you start.

An ISO 42001 gap analysis shows how your current AI governance compares with ISO/IEC 42001: what you can reuse, what is missing, and what needs to happen next.

Discuss a Gap Analysis Explore ISO 42001 services

A clear starting point for ISO 42001.

Most organisations are not starting from zero.

You may already have policies, risk processes, security controls, governance forums or management-system processes that can support an AI Management System.

The Gap Analysis identifies what already works, what can be reused, what needs strengthening and what is still missing.

The outcome is a practical view of the work required to move towards ISO 42001 certification.

Talk to us

What we assess

Governance & scope

  • Organisation context
  • Interested parties
  • AIMS scope
  • AI roles and responsibilities
  • Leadership accountability
  • AI policy

AI risk & impact

  • AI risk methodology
  • Risk assessments
  • AI impact assessments
  • Risk treatment
  • AI objectives

AI lifecycle & controls

  • How AI is developed, procured, deployed and used
  • Relevant Annex A controls
  • Supplier and third-party AI
  • Data considerations
  • Human oversight
  • Transparency

Operating the AIMS

  • Competence and awareness
  • Documented information
  • Communication
  • Operational processes
  • Responsibilities and ownership

Monitoring & measurement

  • AI performance monitoring
  • Control effectiveness
  • Objectives and measures
  • Evidence and records

Assurance & improvement

  • Internal audit
  • Management review
  • Nonconformity
  • Corrective action
  • Continual improvement
Talk to us

What you receive

A clear record of your current position and the work required to move forward.

01

ISO 42001 Gap Analysis Report

A structured assessment of your current position against ISO/IEC 42001.

02

Clause-by-Clause Assessment

Clear findings mapped to the requirements of the standard.

03

Existing Evidence Review

Identification of governance, policies, processes and controls that can already support your AIMS.

04

Gap Register

A clear record of missing, incomplete or weak areas.

05

Annex A Review

Assessment of relevant ISO 42001 controls and where further work may be required.

06

Implementation Roadmap

Prioritised actions showing what needs to happen next.

07

Findings Workshop

A walkthrough of the findings, priorities and recommended next steps.

Talk to us

From where you are now to where you need to be.

Current state What already exists?
Gaps What is missing or weak?
Priorities What needs attention first?
Roadmap What needs to happen next?

Who is it for?

The ISO 42001 Gap Analysis is designed for organisations that want a clear understanding of their current position before committing to implementation or certification.

Starting ISO 42001

You are considering certification and want to understand the work involved.

Existing AI governance

You already have policies and controls but do not know how they map to ISO 42001.

Existing ISO management systems

You already operate standards such as ISO 27001 or ISO 9001 and want to understand what can be reused.

Implementation already underway

You have started building an AIMS but want an independent view of what remains.

Talk to us

Which ISO 42001 service do you need?

Each service supports a different stage of your ISO 42001 journey.

Comparison of Nalgo ISO 42001 services
Compare Gap AnalysisImplementationInternal Audit
Purpose Understand where you are todayBuild and implement your AIMSIndependently test your AIMS
Best for Organisations starting their ISO 42001 journeyOrganisations preparing for certificationOrganisations with an AIMS already in place
What we do Assess your current position against ISO 42001Help you design, document and operate the management systemReview conformity and test whether the system is working effectively
Main deliverable Gap report and prioritised roadmapOperational ISO 42001 AI Management SystemFormal internal audit report and findings
Typical timing Before implementationAfter the initial assessmentBefore certification and at planned intervals afterwards
Outcome Know what needs to changeBecome ready for certificationDemonstrate conformity and identify improvements
Explore each service Explore Gap Analysis Explore Implementation Explore Internal Audit

Gap Analysis

Purpose
Understand where you are today
Best for
Organisations starting their ISO 42001 journey
What we do
Assess your current position against ISO 42001
Main deliverable
Gap report and prioritised roadmap
Typical timing
Before implementation
Outcome
Know what needs to change
Explore Gap Analysis

Implementation

Purpose
Build and implement your AIMS
Best for
Organisations preparing for certification
What we do
Help you design, document and operate the management system
Main deliverable
Operational ISO 42001 AI Management System
Typical timing
After the initial assessment
Outcome
Become ready for certification
Explore Implementation

Internal Audit

Purpose
Independently test your AIMS
Best for
Organisations with an AIMS already in place
What we do
Review conformity and test whether the system is working effectively
Main deliverable
Formal internal audit report and findings
Typical timing
Before certification and at planned intervals afterwards
Outcome
Demonstrate conformity and identify improvements
Explore Internal Audit
Speak to us

Gap Analysis is the first step in certification readiness

Gap Analysis

Where are we now and what do we need to build?

Used near the start of the ISO 42001 journey.

Focuses on:

  • Current state
  • Existing evidence
  • Missing requirements
  • Priorities
  • Implementation roadmap

Certification Readiness Review

Have we implemented enough to face Stage 1 and Stage 2?

Used near the end of the implementation journey.

Focuses on:

  • AIMS maturity
  • Evidence quality
  • Outstanding weaknesses
  • Audit risk
  • Final remediation

What happens next?

The Gap Analysis gives you a clear picture of the work ahead.

From there, you can take the roadmap and implement it internally, or work with Nalgo to design and implement the AIMS.

Gap Analysis
Implementation
Internal Audit
Certification Readiness
Independent Certification Body

Nalgo supports the steps before independent certification. Certification is provided by an independent certification body.

Practical ISO 42001 support.

A useful Gap Analysis should do more than tell you which clauses are missing.

It should help you understand how the standard fits your organisation, what existing governance can be reused and where the real implementation effort sits.

Nalgo combines ISO 42001 expertise with practical experience of AI products, software and enterprise technology.

We focus on building management systems that work in practice, not just documentation that looks ready for an audit.

Talk to us

Understand where you stand against ISO 42001.

Start with a structured assessment of your existing governance, controls and evidence and leave with a clear roadmap for what comes next.

Discuss a Gap Analysis Explore ISO 42001 Implementation