Auto-Generated Artifacts

The Certification Wizard generates several compliance artifacts based on your interview responses.

AI System Registry

A complete inventory mapped to ISO 42001:

ai_systems:
  - id: sys_001
    name: Customer Support Chatbot
    description: GPT-4 powered support assistant
    risk_tier: medium
    status: production
    data_access:
      - customer_names
      - account_numbers
    controls_mapped:
      - A.4.1
      - A.4.4
      - A.9.4

Impact Assessments

Risk assessments for each AI system:

Field	Description
Risk Tier	High, Medium, or Low
Data Sensitivity	Types of data accessed
User Impact	Potential impact on users
Recommended Controls	Priority controls to implement

Gap Analysis Report

Prioritized list of compliance gaps:

• Critical - Must address before certification
• Important - Should address soon
• Minor - Can defer but track

Policy Templates

Draft policies ready for customization:

• AI Governance Policy (A.2.1)
• AI System Development Policy (A.6.1)
• AI Incident Response Policy (A.8.4)
• Third-Party AI Management Policy (A.10.1)

Using Generated Artifacts

1. Review for accuracy - Verify AI generates correct information
2. Customize for your org - Adapt templates to your voice
3. Assign owners - Designate responsible parties
4. Plan remediation - Address gaps systematically

Next Steps

• Best Practices
• Dashboard Overview