Update Details: A number of sample data files have been updated and are available to download.
ER42 AI Risks and Controls Register
This new register has been added and is included in the new ISO 42001 toolkit. To assist with understanding how this new register works we've prepared this sample data version with typical AI related risks and controls. We've also added (without naming any) content to the AI Systems listing outlining the AI capabilities and uses and corresponding conditions of use, restrictions and details of associated assessments.
ER15 Information Security Register
Updated to detail new and emerging information security risks including AI risks which are covered in more detail on ER42. Risks added covering AI-enabled cyber attacks, AI assistants and agents connected to company systems, incident detection and handling, security review of new systems and changes, and unauthorised software and intellectual property.
ER9 Legal Register
A number of updates to reflect the recent changes to Environmental Authorisations (Scotland) Regulations 2018 which meant a number of previous entries were marked as revoked;
Water Environment (Controlled Activities) (Scotland) Regulations 2011, Pollution Prevention and Control (Scotland) Regulations 2012, Special Waste (Scotland) Regulations 1996, Landfill (Scotland) Regulations 2003
F-IMS21 Business Continuity Register
Cloud storage and SaaS platforms added as a critical function with its own recovery objective and arrangements; Operations / Production added to the continuity arrangements
F-IMS25 Information Assets Register
Five assets added: contractual information, AI tools and assistants, the email and collaboration platform, website domains and social media accounts, and backups
