• ISO 42001 AI System Inventory and AI Risk Register Excel template cover
  • What's inside: one Excel workbook with inventory, risk criteria, risk register, risk library, heat map and dashboard
  • AI system inventory sheet with fictional example rows
  • Library of 38 pre-written AI risks with treatments and Annex A controls
  • Inherent and residual AI risk heat maps
1 5

ISO 42001 AI System Inventory & AI Risk Register (Excel)

ISO 42001 AI System Inventory & AI Risk Register (Excel)

$49.00 USD
$49.00 USD
Sale Sold out

Instant download. Editable files. One-organization licence. 5-day fit guarantee.

Upgrade and save

This is one of the 3 tools in the ISO 42001 Starter Bundle: gap assessment and Statement of Applicability, AI system inventory and risk register, and AI impact assessment. Get all 3 for $129 instead of $157 bought separately.

See the ISO 42001 Starter Bundle (Gap + SoA, Risk Register, Impact Assessment)

Building the whole AI management system? The AIMS Implementation Toolkit has all 30 templates for $249.

Not ready to buy? Get the free ISO 42001 readiness checklist

5-day fit guarantee. If it does not fit your AI management system, ask for a refund within 5 days. Conditions.

Know what AI you have, what could go wrong, and what you are doing about it, in one linked Excel workbook. It covers the AI risk assessment and treatment that ISO/IEC 42001 auditors spend much of their time on.

What you get

  1. AI Inventory (Excel sheet): 26 fields per AI system, from owner and vendor to your AI role and an indicative EU AI Act screening, with 3 fictional example rows.
  2. Risk Criteria (Excel sheet): a 5 x 5 likelihood and impact scale written for AI, including impact on individuals, with dollar bands you adjust to your size.
  3. AI Risk Register (Excel sheet): inherent and residual scoring, treatment options, up to three Annex A control links per risk, owners, due dates and acceptance.
  4. Risk Library (Excel sheet): 38 example AI risks with typical consequences, suggested treatments and Annex A controls, ready to adapt.
  5. Heat Map and Dashboard (Excel sheets): inherent and residual heat maps and a summary for management reviews.
  6. Start Here guide (PDF): steps, time estimates, what good looks like and common mistakes.

Also included in the ISO 42001 Starter Bundle and the AIMS Implementation Toolkit.

How to use it

  1. Agree the risk criteria with top management (about an hour).
  2. Fill the inventory. Ask each department which tools suggest, generate, predict, rank or decide something.
  3. For each system, copy relevant risks from the library into the register and make them specific.
  4. Score inherent risk, choose treatments, link Annex A controls, assign owners and score residual risk.
  5. Get High residual risks accepted in writing, then review quarterly using the heat map.

Who it is for

Anyone responsible for AI governance, IT risk or compliance who needs a structured AI risk process. It supports clauses 6.1.2, 6.1.3, 8.2 and 8.3 and controls A.4.2 to A.4.6, and it is also useful on its own for answering customer AI questionnaires.

Good to know

  • Instant download. Editable Excel (.xlsx) plus a PDF guide. Works in Excel 2016 or later, Microsoft 365 and LibreOffice; no macros.
  • Licensed for use within one organization.
  • Requirements and controls are summarized in our own words and referenced by number; the templates do not reproduce ISO/IEC 42001. You need your own licensed copy of the standard.
  • These templates help you prepare. They do not guarantee certification; your certification body decides based on how your AI management system works in practice.
  • 5-day fit guarantee: if it does not fit your system, contact us within 5 days of purchase.
View full details

What every download includes

Instant downloadLink on the confirmation page and by email within minutes.
Fully editableExcel (.xlsx) and PDF. No macros. Works in Microsoft 365 and Google Workspace.
5-day fit guaranteeIf the files do not fit your AI management system, ask for a refund within 5 days. Conditions apply.
Free updatesRevised files for this edition of the standard are sent to you at no charge. One-organization licence.

Templates refer to ISO/IEC 42001:2023 clause and Annex A control numbers and describe requirements in our own words. They do not reproduce the text of the standard, so you need your own licensed copy. Templates support your AI management system; they do not guarantee certification.

Questions about ISO 42001 AI System Inventory & AI Risk Register (Excel)

What counts as an AI system for the inventory?

Anything that suggests, generates, predicts, ranks or decides something: chat assistants, copilots, AI features switched on inside software you already pay for, scoring models, and tools you build yourself. A common mistake is listing only formal AI projects. The inventory records your role for each system, which drives what ISO/IEC 42001 expects of you.

How does the Risk Library help?

It gives you 38 example AI risks, grouped by risk source, each with typical consequences, suggested treatments and related Annex A controls. You copy the ones that apply into the register and rewrite them for your system. It speeds up risk workshops, but the risks still need to name your system, cause and consequence.

How does the register connect to the Statement of Applicability?

Each risk treatment links to up to three Annex A controls using dropdowns. When you complete your Statement of Applicability, every included control can point back to real risks. That traceability from risk to control is something certification auditors commonly check.

Is the EU AI Act column legal advice?

No. It is an indicative screening to flag systems that may need a closer look, for example possible high-risk uses. EU AI Act timelines changed in 2026 and some obligations were postponed, so check the current text or take legal advice before relying on any classification.

How will I receive the files?

A download button appears on the order confirmation page and the same link is emailed to you within a few minutes. Bundles arrive as one ZIP file.

Can I get a refund?

Yes. With our 5-day fit guarantee, if the files do not fit your AI management system you can ask for a full refund within 5 days of your order. It applies once per customer and organization, covers the whole product, and requires you to confirm you have deleted the files. We also refund non-delivery, defective files, wrong items and duplicate purchases within 30 days. Read the full refund policy.

Can I see the files before I buy?

Yes. The images above show real pages from the files, and the free ISO 42001 readiness checklist lets you check where you stand before you buy.

Can I use the templates with more than one company?

Each purchase is licensed to one organization. Consultants and groups need one licence per client or legal entity. See the licence agreement.

Templates that work with this one

Useful next steps when you build an ISO/IEC 42001 AI management system.