{"product_id":"ai-governance-risk-assessment-toolkit-iso-42001-nist-ai-rmf-mitre-atlas-owasp-word-excel","title":"AI Governance \u0026 Risk Assessment Toolkit — ISO 42001, NIST AI RMF, MITRE ATLAS, OWASP (Word + Excel)","description":"\u003cp\u003eThe complete system for governing AI and proving it — governance, risk assessment, impact assessment, security, fairness, and the technical test tooling to verify controls actually work. Built on the frameworks assessors, auditors, and regulators use, and covering every type of AI: generative AI and LLM applications, autonomous agents, RAG systems, classical machine learning, computer vision, speech, and recommenders.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eFramework stack:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eISO\/IEC 42001:2023\u003c\/strong\u003e — the AI management system: clauses 4–10 and all 38 Annex A controls\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eISO\/IEC 42005:2025\u003c\/strong\u003e — AI system impact assessment, with \u003cstrong\u003eISO\/IEC 23894\u003c\/strong\u003e (risk), \u003cstrong\u003e8183\u003c\/strong\u003e (data life cycle), \u003cstrong\u003e5259\u003c\/strong\u003e (data quality), \u003cstrong\u003eTR 24027\u003c\/strong\u003e (bias)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eNIST AI Risk Management Framework 1.0\u003c\/strong\u003e — GOVERN · MAP · MEASURE · MANAGE — plus the \u003cstrong\u003eGenAI Profile (AI 600-1)\u003c\/strong\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eMITRE ATLAS\u003c\/strong\u003e — the adversarial threat knowledge base for AI\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOWASP Top 10 for LLM Applications (2025)\u003c\/strong\u003e and the \u003cstrong\u003eOWASP ML Security Top 10\u003c\/strong\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEU AI Act\u003c\/strong\u003e — prohibited practices, Annex III high-risk, GPAI, transparency duties — and Canada's Algorithmic Impact Assessment alignment\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eWhat's included (21 items):\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eStart Here Guide — the framework map and the working order\u003c\/li\u003e\n\u003cli\u003eAI Governance Framework Guide — stand up an ISO\/IEC 42001 AI management system (policy, board, inventory, SoA, life-cycle gates)\u003c\/li\u003e\n\u003cli\u003eAI Risk Management Methodology — AI RMF + ISO 23894 method with 5×5 scoring\u003c\/li\u003e\n\u003cli\u003eAI System Impact Assessment Guide — ISO\/IEC 42005 process + EU AI Act classification\u003c\/li\u003e\n\u003cli\u003eAI Threat \u0026amp; Vulnerability Catalogue — ATLAS lifecycle, OWASP LLM Top 10 (2025), OWASP ML Top 10, NIST AI 600-1 risk categories, attack surfaces by AI type\u003c\/li\u003e\n\u003cli\u003eModel Evaluation \u0026amp; Validation Procedure — performance, robustness, independent validation, drift, rollback\u003c\/li\u003e\n\u003cli\u003eGenAI \u0026amp; LLM Security Assessment Procedure — assessing chatbots, copilots, RAG, and agents\u003c\/li\u003e\n\u003cli\u003eBias, Fairness \u0026amp; Human Rights Assessment Procedure — criteria, metrics, thresholds, monitoring\u003c\/li\u003e\n\u003cli\u003eAI Data Governance \u0026amp; Quality Procedure — provenance, ISO 5259 quality, RAG corpus governance\u003c\/li\u003e\n\u003cli\u003eAI Third-Party \u0026amp; Supply Chain Procedure — AI Bill of Materials, due diligence, contract clauses\u003c\/li\u003e\n\u003cli\u003eHuman Oversight, Transparency \u0026amp; Explainability Procedure — oversight that works, disclosure, contest channels\u003c\/li\u003e\n\u003cli\u003eAI Incident Response Playbook — attack and harm events, tested kill switch, notifications\u003c\/li\u003e\n\u003cli\u003eForms: Intake \u0026amp; Classification · Impact Assessment · Model Card · Technical Assessment Plan \u0026amp; Report · Go-Live Approval \u0026amp; Risk Acceptance\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAI Risk Assessment Workbook (Excel)\u003c\/strong\u003e — system inventory + risk register pre-loaded with 29 scored scenarios across all AI types, automatic 5×5 inherent\/residual scoring, dashboard\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAI Controls Crosswalk Workbook (Excel)\u003c\/strong\u003e — 52 consolidated controls mapped to ISO 42001 Annex A, NIST AI RMF, EU AI Act, and OWASP\/ATLAS, with a treatment plan — your working Statement of Applicability\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAI Technical Assessment Test Library (Excel)\u003c\/strong\u003e — 42 ready-to-run test cases in 8 categories with objectives, methods, and pass criteria: prompt injection, privacy, RAG, agents, output handling, ML security, fairness\/quality, governance tests\u003c\/li\u003e\n\u003cli\u003eCopyright \u0026amp; Licence Terms\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eWho it's for:\u003c\/strong\u003e AI governance leads, CISOs and security teams, risk and compliance managers, data science leads, and consultants standing up AI governance for clients — in any sector deploying or buying AI.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003ePlease note:\u003c\/strong\u003e Templates and general information, not legal advice, certification, or a guarantee of compliance with any framework named. Framework mappings are a working consolidation — verify against the official publications.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eCopyright \u0026amp; licence:\u003c\/strong\u003e © 2026 Zee Consulting. All rights reserved. This product and everything in it is the intellectual property of Zee Consulting. Your purchase gives one named organization a licence to use and customize the documents for its own internal business — nothing more. The files must not be resold, shared, redistributed, sublicensed, or given to clients or any other organization, in original or modified form. Anyone who uses these materials without a licence is infringing copyright, and Zee Consulting reserves the right to pursue litigation and claim damages and legal costs to the fullest extent permitted by law. The full Copyright \u0026amp; Licence Terms are included in the download (Copyright_and_Licence_Terms.docx) and inside the Start Here guide.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eRequirements:\u003c\/strong\u003e Microsoft Word and Excel (or compatible: Google Docs\/Sheets, LibreOffice). Instant download after purchase — no shipping, no waiting.\u003c\/p\u003e","brand":"Zee Consulting","offers":[{"title":"Default Title","offer_id":67834918699195,"sku":"ZEE-AIG-008","price":349.0,"currency_code":"CAD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0777\/6570\/5915\/files\/ai-governance-toolkit-cover.png?v=1792702629","url":"https:\/\/zeeconsulting.myshopify.com\/products\/ai-governance-risk-assessment-toolkit-iso-42001-nist-ai-rmf-mitre-atlas-owasp-word-excel","provider":"Zee Consulting Templates","version":"1.0","type":"link"}