Please answer these simple 10 questions.

This survey will help determine if your security and governance would improve with YouAttest.

Are internal and external factors relevant to the AI Management System (AIMS)—including AI-related risks, regulatory requirements, and access controls—documented and reviewed at least annually? ISO 42001 Control Clause 4.1.1

Yes

Determine internal and external factors relevant to the AI Management System (AIMS), including AI-related risks and regulatory requirements.

Is an AI policy established, approved by leadership, and enforced through automated access control attestation? ISO 42001 Control Clause 5.2.1

Yes

Establish an AI policy defining objectives, ethical guidelines, and responsible AI use.

Are actions to address AI-related identity and access risks integrated into the AIMS risk management process and tracked via your enterprise campaigns? ISO 42001 Control Clause 6.1.1

Yes

Plan actions to address AI-related risks and opportunities, integrating them into AIMS processes.

Is a systematic AI risk assessment conducted that includes identity and access risks, reports used as evidence of control effectiveness? ISO 42001 Control Clause 8.2.1

Yes

Systematically identify, analyze, and evaluate AI risks, including bias, security, and ethical risks.

Are technical and organizational controls (e.g., least privilege, segregation of duties) implemented to mitigate identified AI access risks? ISO 42001 Control Clause 8.3.1

Yes

Implement controls to mitigate identified AI risks, including technical and organizational measures.

Are AIMS performance metrics—including access compliance rates, UAR completion, and revocation timeliness—monitored and reported via your enterprise dashboards? ISO 42001 Control Clause 9.1.1

Yes

Monitor and measure AIMS performance, including AI system outcomes and compliance.

Are roles and responsibilities for AI system management defined, documented, and enforced through your enterprise role-based access reviews? ISO 42001 Control Annex A - A.2.1.1

Yes

Define and document roles and responsibilities for AI system management.

Is an audit trail of user access to AI systems, models, and data maintained in your enterprise to support transparency and accountability? ISO 42001 Control Annex A - A.3.1.1

Yes

Ensure transparency in AI system operations, including decision-making processes.

Is access to AI training data, production datasets, and model repositories restricted and regularly reviewed to enforce data governance and privacy? ISO 42001 Control Annex A - A.5.1.1

Yes

Ensure proper data governance, including data quality, security, and privacy.

Are third-party AI providers and services subject to access reviews and self-certification campaigns to manage external access risks? ISO 42001 Control Annex A - A.7.1.1

Yes

Manage risks from third-party AI providers or services.

Full Name *

Email *

Phone *

Business *

GRC Partner Email(Optional)