ISO/IEC 42001:2023 Annex A defines 38 controls across nine domains, mirroring the Annex A structure of ISO 27001. This checker asks one plain-language question per control, grouped by domain, and reports a coverage percentage — not a pass/fail verdict.
| Ref | Domain | Questions |
|---|---|---|
| A.2 | AI policies and procedures | 4 |
| A.3 | Internal organisation | 2 |
| A.4 | Resources for AI systems | 3 |
| A.5 | AI risk management | 3 |
| A.6 | AI impact assessment | 2 |
| A.7 | AI system transparency | 3 |
| A.8 | AI system lifecycle | 8 |
| A.9 | Human oversight | 4 |
| A.10 | Responsible disclosure | 3 |
Full context on each domain and what evidence an auditor expects: The ISO 42001 Annex A controls, in plain language →
No. This is a self-reported coverage indicator, not a certification determination. ISO 42001 certification requires an accredited external auditor to review your Statement of Applicability and test whether your selected controls are implemented and evidenced. Annex A itself is informative, not a mandatory checklist — the standard lets you justify exclusions as well as inclusions.
They mirror the Annex A domain table published at /blog/iso-42001-annex-a-controls — 9 domains, 32 controls, the same structure used throughout Drel's ISO 42001 content. Control counts are approximate, since the standard groups some controls differently by sub-clause; the domains reflect the primary organisational groupings.
Each domain's score is the percentage of its questions answered "yes." The overall score is the percentage of all 32 questions answered "yes" across all 9 domains. There is no weighting between domains — a gap in an 8-control domain like A.8 (AI system lifecycle) affects the overall score more than a gap in a 2-control domain like A.6, simply because it has more questions.
No. Everything runs in your browser — there's no server, no account, and no database. The "copy results" button copies your scorecard as plain text; the URL itself encodes your answers so a saved or shared link reproduces your exact result without Drel ever seeing it.
This tool is published by Drel and runs entirely in your browser — no data is sent to Drel or anyone else. It is a self-assessment coverage indicator, not a certification determination; ISO 42001 conformance is decided by an accredited auditor against your organisation's own Statement of Applicability.