This correlation table maps each ISO 42001:2023 clause to example evidence in the alphaZ AI management documents, with an overview and guidance document for the standard.
These reference documents are supplied in PDF format within the alphaZ toolkits. They are for reference and are not intended to be edited.
alphaZ documents - tried and tested guidance documents. No junk, jargon or unnecessary content,
developed over 25 years through practical use in the real world.
Further guidance on ISO 42001 requirements:
These documents are supplied only within the alphaZ toolkits and are not sold on their own. They are included in the ISO 42001 Toolkit.
If you'd like hands-on help setting up your ISO 42001 AI management system or preparing for a certification audit, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
ISO 42001:2023 Correlation and Guidance
The ISO 42001:2023 Correlation and Guidance brings together a correlation table and an overview and guidance document for ISO 42001:2023. The correlation takes each clause of the standard, from Context of the Organisation to Improvement, and gives example evidence of compliance, pointing to the relevant IMS1 procedure or to the alphaZ AI policy, procedure, registers and forms.
The alphaZ IMS framework follows how a business works rather than the clause order of the standard, so the correlation shows where each requirement is met. Use it when setting up the system, checking it or preparing for a certification audit.
Two Reference Documents
- ISO 42001:2023 Correlation - a clause by clause table giving each requirement with a short explanation and where the evidence sits in the IMS1 procedures and the alphaZ documents
- ISO 42001 Overview and Guidance - an introduction to the standard covering the organisation's role in relation to AI, the AI system impact assessment and the overall requirements
What the Correlation Covers
- Clause 4 Context - issues including climate change, the intended purpose of each AI system and the organisation's role, interested parties and scope
- Clause 5 Leadership - leadership and commitment, the AI policy, and roles, responsibilities and authorities
- Clause 6 Planning - AI risk assessment and treatment, the AI system impact assessment, AI objectives and planning of changes
- Clause 7 Support - resources, competence, awareness, communication and documented information
- Clause 8 Operation - operational planning and control, AI risk assessment, AI risk treatment and AI system impact assessment
- Clauses 9 and 10 - monitoring, internal audit, management review, continual improvement, and nonconformity and corrective action
Who Needs an ISO 42001:2023 Correlation?
The correlation is for organisations using the alphaZ documents with an ISO 42001:2023 AI management system. It helps the AI lead check each requirement is covered and find the evidence quickly for internal audits, management review and certification audits.
Included in the ISO 42001 Toolkit
These documents are part of the ISO 42001 Toolkit.
Using the Correlation
Work through the table with the IMS1 procedures and registers open, checking each evidence item is in place and reflects how you operate. The correlation is a PDF reference; for an editable clause by clause audit checklist use the ISO 42001:2023 Requirements Checklists.
Note: ISO clause checklists only include the clause numbers and short prompts for each clause (due to copyright reasons) and therefore a full version of the ISO standard is required to be used in conjunction with these checklists.
Related Documents
The correlation refers to documents such as PP-1-42 Artificial Intelligence Policy Procedure, P-120 Artificial Intelligence Policy, the ER42 AI Risks and Controls Register, F-AI3 AI Impact Assessment, F-AI1 AI System Life Cycle, F-AI2 AI Data Matrix, F-IMS70 Statement of Applicability - AI, F-IMS22 Interested Parties Register and F-IMS23 Opportunities and Risks Register.
Would you rather we prepared it for you?
Our AI Policy and Risk Register service records your AI tools, the risks and controls against each, and what AI may not do, with your AI policy prepared to match.
AI Policy and Risk Register