AI Governance & Risk Assessment Toolkit — ISO 42001, NIST AI RMF, MITRE ATLAS, OWASP (Word + Excel)

The complete system for governing AI and proving it — governance, risk assessment, impact assessment, security, fairness, and the technical test tooling to verify controls actually work. Built on the frameworks assessors, auditors, and regulators use, and covering every type of AI: generative AI and LLM applications, autonomous agents, RAG systems, classical machine learning, computer vision, speech, and recommenders.

Framework stack:

• ISO/IEC 42001:2023 — the AI management system: clauses 4–10 and all 38 Annex A controls
• ISO/IEC 42005:2025 — AI system impact assessment, with ISO/IEC 23894 (risk), 8183 (data life cycle), 5259 (data quality), TR 24027 (bias)
• NIST AI Risk Management Framework 1.0 — GOVERN · MAP · MEASURE · MANAGE — plus the GenAI Profile (AI 600-1)
• MITRE ATLAS — the adversarial threat knowledge base for AI
• OWASP Top 10 for LLM Applications (2025) and the OWASP ML Security Top 10
• EU AI Act — prohibited practices, Annex III high-risk, GPAI, transparency duties — and Canada's Algorithmic Impact Assessment alignment

What's included (21 items):

• Start Here Guide — the framework map and the working order
• AI Governance Framework Guide — stand up an ISO/IEC 42001 AI management system (policy, board, inventory, SoA, life-cycle gates)
• AI Risk Management Methodology — AI RMF + ISO 23894 method with 5×5 scoring
• AI System Impact Assessment Guide — ISO/IEC 42005 process + EU AI Act classification
• AI Threat & Vulnerability Catalogue — ATLAS lifecycle, OWASP LLM Top 10 (2025), OWASP ML Top 10, NIST AI 600-1 risk categories, attack surfaces by AI type
• Model Evaluation & Validation Procedure — performance, robustness, independent validation, drift, rollback
• GenAI & LLM Security Assessment Procedure — assessing chatbots, copilots, RAG, and agents
• Bias, Fairness & Human Rights Assessment Procedure — criteria, metrics, thresholds, monitoring
• AI Data Governance & Quality Procedure — provenance, ISO 5259 quality, RAG corpus governance
• AI Third-Party & Supply Chain Procedure — AI Bill of Materials, due diligence, contract clauses
• Human Oversight, Transparency & Explainability Procedure — oversight that works, disclosure, contest channels
• AI Incident Response Playbook — attack and harm events, tested kill switch, notifications
• Forms: Intake & Classification · Impact Assessment · Model Card · Technical Assessment Plan & Report · Go-Live Approval & Risk Acceptance
• AI Risk Assessment Workbook (Excel) — system inventory + risk register pre-loaded with 29 scored scenarios across all AI types, automatic 5×5 inherent/residual scoring, dashboard
• AI Controls Crosswalk Workbook (Excel) — 52 consolidated controls mapped to ISO 42001 Annex A, NIST AI RMF, EU AI Act, and OWASP/ATLAS, with a treatment plan — your working Statement of Applicability
• AI Technical Assessment Test Library (Excel) — 42 ready-to-run test cases in 8 categories with objectives, methods, and pass criteria: prompt injection, privacy, RAG, agents, output handling, ML security, fairness/quality, governance tests
• Copyright & Licence Terms

Who it's for: AI governance leads, CISOs and security teams, risk and compliance managers, data science leads, and consultants standing up AI governance for clients — in any sector deploying or buying AI.

Please note: Templates and general information, not legal advice, certification, or a guarantee of compliance with any framework named. Framework mappings are a working consolidation — verify against the official publications.

Copyright & licence: © 2026 Zee Consulting. All rights reserved. This product and everything in it is the intellectual property of Zee Consulting. Your purchase gives one named organization a licence to use and customize the documents for its own internal business — nothing more. The files must not be resold, shared, redistributed, sublicensed, or given to clients or any other organization, in original or modified form. Anyone who uses these materials without a licence is infringing copyright, and Zee Consulting reserves the right to pursue litigation and claim damages and legal costs to the fullest extent permitted by law. The full Copyright & Licence Terms are included in the download (Copyright_and_Licence_Terms.docx) and inside the Start Here guide.

Requirements: Microsoft Word and Excel (or compatible: Google Docs/Sheets, LibreOffice). Instant download after purchase — no shipping, no waiting.