ISO/IEC 42001 AI Management System (AIMS) Catalog

The ISO/IEC 42001 catalog provides pre-built, typed, GtWR-clean requirements for organizations establishing an Artificial Intelligence Management System (AIMS) under ISO/IEC 42001:2023.

Overview

ISO/IEC 42001 is the international standard specifying requirements for managing AI systems responsibly across their entire lifecycle. This catalog maps management system requirements (Clauses 4 through 10) and reference controls (Annex A) into machine-readable Requirement objects.

Baseline Disclaimer

This catalog is a baseline reference and complement to formal auditing, not a substitute for expert review.

Usage

from vnvspec import Spec
from vnvspec.catalog.standards.iso_42001 import annex_a_controls, management_controls
from vnvspec.core.trace import standard_gap_analysis

# Load ISO/IEC 42001 requirements
reqs = management_controls() + annex_a_controls()

# Construct specification
spec = Spec(
    name="enterprise-aims",
    description="Enterprise AI Management System Specification",
    requirements=reqs,
)

# Run gap analysis against bundled ISO/IEC 42001 clause registry
report = standard_gap_analysis(spec, "iso_42001")
coverage_pct = (report.covered / report.total_clauses) * 100 if report.total_clauses else 0.0
print(f"Coverage: {coverage_pct:.1f}%")

Structure

The catalog is split into two modules:

• management_controls(): Covers Clauses 4–10 (Context, Leadership, Planning, Support, Operation, Evaluation, Improvement).
• annex_a_controls(): Covers Annex A controls (AI System Impact Assessment, Lifecycle Management, Data Governance, User Information, Supplier Relationships).