How the toolkit is built

Standards alignment

• ISO/IEC 42001:2023 — AI Management Systems
• ISO/IEC 23894:2023 — AI Risk Management
• ISO/IEC 42005 — AI System Impact Assessment
• NIST AI Risk Management Framework 1.0
• EU AI Act (Regulation (EU) 2024/1689)

Author

Authored by a Candidate Expert on Canada's mirror committee for ISO/IEC JTC 1/SC 42. Mappings reflect direct reading of the published standards.

Design principles

• Privacy by design. All data stays in your browser. No backend.
• Audit-defensible. Outputs are structured to feed the AI Controls Catalog's Test of Operating Effectiveness procedures.
• Practical, not academic. Calibrated for a Friday afternoon, not a year-long consulting engagement.
• Open and free. CC-BY 4.0 content, MIT code.

Limitations

This toolkit is a reference, not legal or regulatory advice. Specific engagements should validate framework references against current published versions and confirm with appropriate counsel.