AI Risk Assessment Report – Register, Heat Maps, ISO 42001 Treatment Plan and Live Workbook

Description

What the report contains

You already have your heat map, your top risks and your findings for free. This is the full assessment behind them, written up as the record an auditor, a board or a risk committee expects to see.

• The complete AI risk register, highest level first. Every risk to the people your AI systems affect and to the organization, with its owner, the AI systems, models, data and use cases it affects, the objectives at risk (fairness, transparency, safety and more), the controls already in place, its likelihood, impact and level, and the rationale for the rating.
• Heat maps today and after treatment, side by side. Both drawn against your own appetite line, so anyone can see at a glance what the treatment plan achieves.
• The treatment plan by due date. For each risk: the decision, the planned actions, the ISO/IEC 42001:2023 Annex A controls it relies on, the treatment owner, the due date, the current and target level, and the risk owner’s acceptance.
• Every finding, with what closes it. Each gap between your assessment and what ISO/IEC 42001 clauses 6.1.2 and 6.1.3 ask for, the risks it applies to, what to change, and the document that closes it.
• An AI-assisted analysis and 30/60/90-day roadmap. A one-sentence verdict, where you stand and what it means, a statement for senior management, three to five priorities and a roadmap, written from your own ratings and checked automatically against them.
• Your process score in detail. Nine weighted dimensions, from criteria and ownership to treatment and residual risk acceptance, so you can see exactly where the assessment is thin.
• Your criteria, written up. Likelihood and impact scales, risk bands and the appetite line every rating was made against.
• What changed since last year. Run next year’s review from this register and the report shows which risks were added, closed or moved level, and how the headline figures changed.

The live Excel workbook

A risk register is only useful if it can be kept up to date when something changes, so you also get the register as a working file, not a static export:

• Dashboard: the process score, level and heat maps, recalculated as you edit.
• Criteria: your scales, band ceilings and appetite line, which drive every calculation.
• Scope and Risk register: change a likelihood or impact and the level, band and appetite check update.
• Treatment plan: decisions, actions, owners, due dates, targets and acceptance.
• Statement of Applicability starter: all 38 ISO/IEC 42001:2023 Annex A controls, with those your treatments rely on marked as selected and the risks they treat listed. One click also carries them into our free SoA generator.

How to get it

1. Run the free AI risk assessment: set your criteria, list what is in scope, pick risks from the library, rate them and decide how to treat each one.
2. See your heat map, top risks and findings free on the result page.
3. Choose Get the full report. The report and workbook are in your account straight away, and they rebuild from your latest answers whenever you download them.

Built for organizations working towards ISO/IEC 42001 and for anyone who needs to show how the risks of the AI they build, buy or use are assessed and treated. It complements, rather than replaces, an AI system impact assessment for a specific system.

One payment covers this assessment. Edit it as often as you like and download the updated report at no extra cost. This is a self-assessment built from the information you enter; it is not a certification or an audit opinion.