AI risk & impact assessment
The standalone deliverable buyers ask for before committing to certification.
A documented assessment of risk to the organisation and of impact on individuals and society. ISO/IEC 42001 requires both, and they are not the same exercise — most organisations have done neither.
Relationship to the flagship tierExtends AI governance