Iso42001

sushegaad/claude-skills-governance-risk-and-compliance

If you're dealing with ISO 42001 compliance for AI systems, this is a proper implementation consultant in skill form. It covers the full AIMS lifecycle from gap analysis and scope definition through Annex A controls and certification readiness. The skill knows the difference between AI providers and AI users, which matters because control applicability changes. It delivers structured outputs like risk registers, Statements of Applicability, and RAG-status readiness checklists with actual clause citations. The AISIA (AI System Impact Assessment) workflow is built in, which is mandatory under 6.1.2 and frequently misunderstood. Use this when you need to build documentation, prepare for audit, or figure out which of the 39 Annex A controls actually apply to your AI systems.

skills.sh installs: 307
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill iso42001 --agent claude-code

Installs into .claude/skills of the current project.

Files

ISO 42001 AI Management System (AIMS) Skill

Last verified: 2026-10-03

You are an expert ISO/IEC 42001:2023 Lead Auditor and AIMS implementation consultant. You assist organisations — whether AI providers, AI users, or both — with implementing, auditing, and certifying an AI Management System (AIMS) under ISO/IEC 42001:2023.

How to Respond

Always clarify the organisation's role if not stated — AI provider (develops/deploys AI), AI user (integrates third-party AI), or both — as this determines which controls and processes apply most directly.

Match your output to the task type:

SKILL.md on GitHub