Services / Packages
ISO/IEC 42001 Internal Audit
The independent internal audit ISO/IEC 42001 requires, conducted by a qualified lead auditor.
From $5,0002–3 weeks
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
Your certification or surveillance audit is coming up.
The standard requires an internal audit and no one internal is independent enough.
You want findings before the certification body finds them.
Overview
ISO/IEC 42001 requires organizations to audit their own AI management system at planned intervals. We conduct the internal audit independently, test your processes and records against the standard, and report nonconformities and opportunities for improvement before your certification or surveillance audit.
What’s included
- Audit plan and criteria
- Interviews with process owners
- Testing of records and evidence
- Findings classified as nonconformities or improvements
- Internal audit report
- Input for your management review
How it works
Plan
We set the audit scope, criteria, and schedule.
Audit
We interview owners and test evidence against the standard.
Report
We deliver findings and an audit report ready for management review.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use our internal audits to stay ready for certification and surveillance audits.
- Annual internal audits
- Readiness before certification audits
- Independent review of AI controls
- Findings your team can act on
Public Sector
Public institutions use our internal audits for independent assurance over AI governance.
- Independent review of AI processes
- Documentation for oversight bodies
- Readiness for external audits
- Clear corrective actions
Nonprofits
Nonprofits use our internal audits for an independent check without a dedicated audit team.
- Independent review sized to your program
- Plain-language findings
- Readiness for certification
- Board-ready summary
Frequently asked questions
How much does ISO/IEC 42001 Internal Audit cost?
ISO/IEC 42001 Internal Audit starts at $5,000. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
Most engagements take 2–3 weeks, depending on scope and how quickly information is available.
What do we receive?
The engagement includes: audit plan and criteria; interviews with process owners; testing of records and evidence; findings classified as nonconformities or improvements.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Governance Blueprint for Credit UnionsWho owns AI decisions at a credit union, how new AI uses get approved, how the board oversees AI, and how to size the structure to your asset size.
- AI Risk Register for Credit UnionsA sample register of common credit union AI uses, the data each one touches, its risk tier, the controls it needs, and who owns it.
- AI Impact Assessment Example for Credit UnionsA worked example assessing an automated personal loan decision model, from purpose and data to risks, controls, and approval.
- AI Laws by StateWhere each state’s AI and privacy rules stand, with key dates and a page for every state.
Related services
ISO/IEC 42001 Implementation
Hands-on help building the AI management system ISO/IEC 42001 requires, ready for a certification audit.
ISO/IEC 42001 Gap Assessment
An assessment of your AI management system against ISO/IEC 42001, the international standard for governing AI.
AI Risk Review
An independent review of one AI tool, vendor, or use case before you adopt it or expand it.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.