ISO 42001 Overview
These cards show the complete ISO/IEC 42001:2023 AI Management System structure, covering mandatory Clauses 4–10 and the optional Annex A controls.
What's New in the ISO 42001 Visual Library
May 2026: Twelve new AI Principles cards covering the six core responsible AI concepts — Fairness, Transparency, Accountability, Human Oversight, Privacy, and Safety and Reliability — each available as a professional infographic and a humorous version. These complement the ISO/IEC 42001 clause and Annex A material with the underlying AI governance principles auditors and practitioners refer to most often.
Also recent: the Audit Readiness mini-deck — five card pairs on what an ISO 42001 auditor actually looks for, evidence versus good intentions, strong versus weak evidence examples, common audit failure modes across Annex A, and how to talk about controls confidently during a certification audit.
Coming next: reference cards on the ISO 42001 certification path, ISO 42001 versus ISO 27001, EU AI Act alignment, common implementation failure modes, and AI policy templates. See the full changelog on GitHub.
ISO 42001 Clause Memory Cards
Simple memory cards for quick recall. Each card reduces one clause to its core keyword. Professional simple cards use a clean minimal style; funny simple cards use a strong visual hook.
ISO 42001 Professional Simple Memory Cards
ISO 42001 Humorous Simple Memory Cards
Simple memory cards for ISO 42001 Clauses 4 to 10 — quick keyword recall for study, training, and awareness sessions.
ISO 42001 Clause Cards
Clauses 4–10 are the mandatory requirements of ISO 42001 — every organisation must implement them. Each clause builds on the previous one, forming a management system cycle.
| Clause | Professional Infographic | Humorous Infographic |
|---|---|---|
| Clause 4Context of the Organisation | ![]() |
![]() |
| Clause 5Leadership | ![]() |
![]() |
| Clause 6Planning | ![]() |
![]() |
| Clause 7Support | ![]() |
![]() |
| Clause 8Operation | ![]() |
![]() |
| Clause 9Performance Evaluation | ![]() |
![]() |
| Clause 10Improvement | ![]() |
![]() |
Full infographic cards for ISO 42001 Clauses 4 to 10 — the mandatory requirements every organisation must implement for ISO/IEC 42001:2023 certification.
ISO 42001 Annex A Domain Cards
Annex A is the operational core of ISO 42001. Controls are grouped into four domains: Governance, Organisation, Operation, and Relationships. Organisations select controls based on their AI risks, context, and objectives.
| Domain | Professional Infographic | Humorous Infographic |
|---|---|---|
| Governance | ![]() |
![]() |
| Organisation | ![]() |
![]() |
| Operation | ![]() |
![]() |
| Relationships | ![]() |
![]() |
Domain-level cards for ISO 42001 Annex A — Governance, Organisation, Operation, and Relationships controls for responsible AI management.
ISO 42001 Annex A Control Cards
Recommended governance measures that help organisations manage AI systems responsibly. Controls A.2 through A.10 cover the full range of AI management responsibilities.
| Control | Professional Infographic | Humorous Infographic |
|---|---|---|
| A.2Policies Related to AI | ![]() |
![]() |
| A.3Internal Organisation | ![]() |
![]() |
| A.4Resources for AI Systems | ![]() |
![]() |
| A.5Assessing Impacts of AI Systems | ![]() |
![]() |
| A.6AI System Life Cycle | ![]() |
![]() |
| A.7Data for AI Systems | ![]() |
![]() |
| A.8Information for Interested Parties | ![]() |
![]() |
| A.9Use of AI Systems | ![]() |
![]() |
| A.10Third-Party and Customer Relationships | ![]() |
![]() |
Control-level cards covering ISO 42001 Annex A controls A.2 through A.10 — from AI policies and internal organisation to third-party and customer relationships.
ISO 42001 Audit Readiness Cards
Five cards to help you prepare for ISO 42001 audits. Covers what auditors actually look for, the difference between strong and weak evidence, common failure patterns across Annex A, and how to talk about controls confidently.
| Card | Professional Infographic | Humorous Infographic |
|---|---|---|
| Audit-01What an Auditor Actually Looks For | ![]() |
![]() |
| Audit-02Evidence vs Good Intentions | ![]() |
![]() |
| Audit-03Strong vs Weak Evidence Examples | ![]() |
![]() |
| Audit-04Common Audit Failure Modes Across Annex A | ![]() |
![]() |
| Audit-05How to Talk About Controls Confidently | ![]() |
![]() |
ISO 42001 audit readiness cards — auditor expectations, evidence standards, common Annex A failure patterns, and how to communicate controls confidently.
ISO 42001 AI Principles Cards
Core responsible AI concepts that support practical AI governance and AIMS thinking. Covers fairness, transparency, accountability, human oversight, privacy, and safety and reliability.
These cards are learning aids. They do not add new ISO/IEC 42001 requirements and should not be treated as a replacement for the official standard.
| Principle | Professional Infographic | Humorous Infographic |
|---|---|---|
| Principle-01Fairness | ![]() |
![]() |
| Principle-02Transparency | ![]() |
![]() |
| Principle-03Accountability | ![]() |
![]() |
| Principle-04Human Oversight | ![]() |
![]() |
| Principle-05Privacy | ![]() |
![]() |
| Principle-06Safety and Reliability | ![]() |
![]() |
AI principles cards — fairness, transparency, accountability, human oversight, privacy, and safety and reliability as core responsible AI governance concepts.
ISO 42001 Archive Variants
Earlier infographic cards superseded by the current designs. Content remains accurate — use these if you prefer the format.












Earlier ISO 42001 infographic card variants — Clause 8, Clause 9, Clause 10, Annex A.5, Annex A.10, and the Annex A domain overview.
ISO 42001 Frequently Asked Questions
What is ISO/IEC 42001?
ISO/IEC 42001:2023 is the international standard for establishing, implementing, maintaining, and continually improving an AI Management System (AIMS). Published in December 2023, it is the world's first certifiable standard specifically for AI governance. It is a governance standard, not a technical one — it does not tell you how to build AI systems, it tells you how to govern them responsibly.
Who is ISO 42001 for?
Any organisation that develops, deploys, or uses AI systems — of any size and in any sector. Proportionality is built into the standard's design: controls and obligations are calibrated to the nature, scale, and context of the organisation's AI activities, so a small team using third-party AI tools can apply it as meaningfully as a large AI developer.
What are Clauses 4 to 10?
Clauses 4–10 are the mandatory requirements of ISO 42001: Context of the Organisation, Leadership, Planning, Support, Operation, Performance Evaluation, and Improvement. Together they form a Plan–Do–Check–Act cycle, and every organisation seeking certification must implement all of them. They follow the ISO High Level Structure also used by ISO 27001 and ISO 9001.
What is Annex A?
Annex A contains 38 normative controls covering AI policies, roles, resources, impact assessment, the AI system life cycle, data, transparency to interested parties, use of AI, and third-party relationships. Organisations select controls based on their AI risks and record the selection in a Statement of Applicability — once selected, a control becomes mandatory for that organisation.
Can an organisation get certified against ISO 42001?
Yes. ISO/IEC 42001 is a certifiable management system standard, meaning accredited certification bodies can audit an organisation's AI Management System and issue a certificate — the same model used for ISO 27001 and ISO 9001. Because it shares the ISO High Level Structure, it can be integrated with those existing management systems rather than run as a separate programme.
Are these cards free to use?
Yes. Every card in the ISO 42001 Visual Library is released under the MIT Licence — free to use, share, adapt, or include in commercial work, for study, training, presentations, or audit preparation. This is an independent learning resource and is not a replacement for the official ISO/IEC 42001 standard text.
If these cards were useful, the library lives on GitHub, where a star helps other people find it.





























































