F-IMS70 Statement of Applicability - AI
| File Reference : | F-IMS70 Statement of Applicability - AI |
This is the ISO 42001 Statement of Applicability laid out control by control, with a column for why each control is included and a note of how it is implemented or why it does not apply.
This register template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Register number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested register templates. No junk, jargon or unnecessary content. Simple and usable register templates
developed over 25 years through practical use in the real world.
Further guidance on ISO 42001 controls:
Download this register with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This register is also included in the ISO 42001 Toolkit, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like hands-on help completing your Statement of Applicability and AI risk treatment, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
AI Statement of Applicability Template
The F-IMS70 Statement of Applicability - AI is a Word template for ISO 42001:2023 that lists the Annex A controls with space to record the reason each one is included and an overview of how it is implemented, or the justification where it does not apply.
ISO 42001 requires a statement of applicability as part of AI risk treatment. It records the outcome of your AI risk assessment and is one of the first documents looked at during a certification audit to see which controls are in place.
What's Included in this Register
- Reviewed By and Date Reviewed - a header row to record who reviewed the statement and when
- Inclusion reason codes - L Legislative, C Contractual, B Business Management and R Risk-based from the AI risk assessment, with N/A where a control is excluded
- Annex A controls A.2 to A.10 - each control with its number and title, the inclusion reason and comments on implementation or justification, from policies related to AI and internal organisation through to data for AI systems, use of AI systems and third-party and customer relationships
- Additional Controls - a section for any controls you apply beyond Annex A
Built for ISO 42001 Clause 6.1.3
- Records the decision on all 38 Annex A controls in one document
- Shows the reason for including each control as well as how it is implemented
- Records the justification for any control that does not apply
- Laid out in the same way as the F-IMS26 Statement of Applicability for ISO 27001, so the two sit side by side in an integrated system
Sample Data Versions for Subscribers
Completed examples are available with an alphaZ subscription including: a statement completed for a typical organisation, with the inclusion reason and an implementation note referencing the alphaZ AI documents for each control.
Included in the ISO 42001 Toolkit
This register is part of the ISO 42001 Toolkit.
Keeping the Statement Current
Review the statement whenever your AI risk assessment, impact assessments or risk treatment change, when an AI system is added or withdrawn, and before each audit. Update the reviewer and date in the header row each time, so it is clear which version is current.
Document Control
The footer carries the register number and title, issue, information classification and page numbering. The register can be listed with your other controlled documents on the F-IMS20 Document Register.
Works with the AI Risks and Controls Register
The decisions recorded in the statement follow from your AI risk and impact work:
We can help you set this up
A day of remote support can be spent setting up this document around your own arrangements, alongside any other documents your management system needs. Tell us what you need and we will plan the day around it.
Remote Support