ISO/IEC 42001 Statement of Applicability Builder
Work through every ISO/IEC 42001 Annex A control area, mark what applies and how far it is implemented, and generate a draft Statement of Applicability for your AI management system.
Template & sample only — a structured starting point with sample content, not legal, audit, certification or investment advice. Subscribers customise it with their own details and generate the document for their own work.
What this template gives you
- A certification audit for ISO/IEC 42001 expects a Statement of Applicability: which Annex A controls apply to your AI management system, why, and their status.
- This template covers all nine Annex A control areas (A.2 policies to A.10 third-party relationships) with each control summarised in plain language.
- Mark each as implemented, partial, planned or not applicable, add owners and evidence, and the document regenerates as you type.
- Material gaps are flagged, and an implementation score shows how close you are. Export to Word, PDF, Markdown or CSV.
Frequently asked questions
What is a Statement of Applicability for ISO/IEC 42001?
It is the document that lists the Annex A controls of ISO/IEC 42001, states whether each applies to your AI management system, justifies any exclusions, and records implementation status. Certification bodies review it during the audit.
Does this reproduce the ISO standard?
No. Controls are summarised in our own words and grouped by the public Annex A theme labels (A.2 to A.10). You still need your own copy of ISO/IEC 42001 to implement it.
Is this a finished document I can rely on?
No. Every tool in this suite is a template with sample content. It gives you a structured, editable starting point and generates a document from your own answers, but it is not legal, audit, certification, investment or professional advice. Review and adapt the output, and have it checked by the appropriate specialist before you rely on it.
Who can use it?
The page and sample are public. Customising the template with your own details and exporting the generated document (Word, PDF, Markdown, CSV) is part of any PlayCISO paid plan. Your work is saved in your own browser.
More free security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.