ISO/IEC 42001 AI Management System Specialist — Security & Safety

ISO/IEC 42001 AI Management System Specialist is an internal-audit-grade skill for compliance teams. It supports three decisions: identifying gaps against Clauses 4-10, building an AI risk register with Annex A control mapping, and creating a 12-month internal audit plan for Clause 9.2. It produces audit-ready evidence and prioritization outputs.

ra-qm claude-code

📂 View skill on GitHub ↗ 🚀 How to use

✨ What it does

Gap analysis scoring for Clauses 4-10 with remediation priority.
AI risk register builder that maps risks to Annex A controls (A.2-A.10).
12-month internal audit scheduler with auditor independence checks.
Cross-framework reuse mapping to avoid duplication with ISO 27001/13485.
Output standards with bottom line, decision, evidence, and action steps.

🎯 When to use it

Preparing for ISO/IEC 42001 certification and needing to identify and prioritize gaps against Clauses 4-10.
Building or updating an AI risk register that links risks to Annex A controls per ISO 23894.
Creating a 12-month internal audit plan that satisfies Clause 9.2 requirements.
Onboarding AI systems into an existing ISMS (ISO 27001) or QMS (ISO 13485) program.

🚀 How to use

Trigger by asking for ISO 42001 gap analysis, risk register, or audit plan. Provide evidence inventory JSON for gap analysis, risks JSON for risk register, or scope JSON for audit scheduler. Example prompts:

Run the AIMS gap analyzer on our current evidence file.
Build an AI risk register for our new recommendation system.
Create a 12-month internal audit plan for our AIMS.

📄 Output: Produces prioritized remediation plans, structured AI risk registers with control mappings, and 12-month audit schedules.

📦 Add this skill to Claude Code

# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills

# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/ra-qm-team/skills/iso42001-specialist .claude/skills/iso42001-specialist

Skill source: ra-qm-team/skills/iso42001-specialist/SKILL.md

⚠️ Good to know

Not for executive AI strategy or EU AI Act compliance; requires input data files and assumes familiarity with ISO 42001 clauses and Annex A controls.

❓ FAQ

What is the difference between ISO 42001 and EU AI Act?

ISO 42001 is a voluntary management-system standard, while the EU AI Act is binding product-safety regulation. They overlap but have different artefacts.

How often should internal audits be conducted?

Mature programs cover every clause and applicable Annex A control over a 3-year cycle, with annual full-system audits and quarterly or semi-annual deep dives.

What is the most common nonconformity in early adopters?

Untreated post-deployment monitoring, as there is often no documented procedure for AI incidents (Annex A.9.3).

🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.