AIGO — ISO/IEC 42001 Master Mapping

AIGO — AI Governance Operating Framework

Version: 0.1
Status: Draft
Working Name: AIGO
Full Name: AI Governance Operating Framework
Document Identifier: AIGO-MAP-ISO42001-001
Mapping Standard: ISO/IEC 42001
Mapping Type: Master Framework Mapping

1. Purpose

This document defines the master mapping relationship between the AIGO AI Governance Operating Framework and ISO/IEC 42001. The purpose of this document is to establish a structured relationship between the AIGO framework architecture and the ISO/IEC 42001 AI management system. The master mapping provides the foundation for more detailed mappings covering:

ISO/IEC 42001 requirements;
AI management controls;
AI lifecycle;
AI risk management;
governance;
evidence;
implementation; and
organizational alignment.

2. Scope

This mapping covers the relationship between the AIGO framework and ISO/IEC 42001 at an architectural and conceptual level. The mapping considers:

AIGO framework components;
ISO/IEC 42001 management-system requirements;
ISO/IEC 42001 AI management controls;
AI governance;
AI risk management;
AI lifecycle management;
monitoring;
assurance;
continual improvement; and
implementation support.

This document does not reproduce the ISO/IEC 42001 standard.

3. Mapping Objectives

The mapping has the following objectives:

Establish traceability between AIGO and ISO/IEC 42001.
Demonstrate how AIGO supports an AI management system.
Identify areas of direct and supporting alignment.
Identify areas requiring organizational implementation.
Provide a foundation for detailed mapping documents.
Support implementation planning.
Support gap assessment.
Support assurance and audit preparation.
Support future AIGO-to-standard mappings.
Maintain a consistent external-reference architecture.

4. Mapping Principles

4.1 Traceability

Every material mapping should be traceable from an ISO/IEC 42001 requirement or control to one or more AIGO components.

4.2 No Standard Reproduction

The AIGO repository should not reproduce copyrighted ISO/IEC 42001 text. Mappings should use:

clause references;
control identifiers where appropriate;
short descriptions;
paraphrased relationships; and
AIGO references.

4.3 Framework Independence

AIGO remains an independent governance framework. Alignment with ISO/IEC 42001 should not make AIGO dependent on ISO/IEC 42001.

4.4 Risk-Based Alignment

Mapping should consider the risk-based nature of AI governance and the proportional application of governance requirements.

4.5 Implementation Traceability

Where appropriate, a mapping should connect the external requirement to:

AIGO framework components;
implementation guidance;
procedures;
controls;
records;
evidence; and
improvement activities.

5. Mapping Relationship Types

The following relationship types are used throughout the AIGO ISO/IEC 42001 mapping.

5.1 Direct

AIGO explicitly addresses the intent of the ISO/IEC 42001 requirement.

5.2 Supporting

AIGO provides governance capabilities that support implementation of the ISO/IEC 42001 requirement.

5.3 Partial

AIGO addresses part of the requirement, while additional organizational implementation is necessary.

5.4 Complementary

AIGO provides additional governance capabilities that extend beyond the corresponding ISO/IEC 42001 requirement.

5.5 Organizational Implementation

AIGO provides a framework capability, but the organization must establish and operate the required management-system activity.

5.6 Gap

AIGO does not currently provide sufficient coverage and additional framework development or organizational implementation may be required.

6. AIGO Framework Architecture

The AIGO framework consists of nine primary framework components.

AIGO ID	Framework Component	Primary Purpose
AIGO-F01	Charter	Establishes the framework foundation and scope
AIGO-F02	Principles	Establishes governance principles
AIGO-F03	Governance Domains	Defines major governance areas
AIGO-F04	Governance Roles	Defines accountability and responsibilities
AIGO-F05	AI Governance Lifecycle	Defines lifecycle governance
AIGO-F06	AI Risk Management	Defines AI risk governance
AIGO-F07	AI Governance Controls	Defines governance controls
AIGO-F08	AI Governance Maturity	Defines governance capability maturity
AIGO-F09	AI System Profiles	Defines structured AI system information

7. AIGO Supporting Architecture

The AIGO repository also contains supporting implementation and operational components.

AIGO ID	Supporting Component	Primary Purpose
AIGO-G01	Implementation Guidance	Provides practical implementation guidance
AIGO-G02	Operational Procedures	Defines repeatable governance processes
AIGO-G03	Templates	Provides reusable governance artifacts
AIGO-G04	Examples	Provides implementation examples
AIGO-M01	External Mappings	Provides alignment with external frameworks and standards
AIGO-S01	Schemas	Provides structured data definitions
AIGO-T01	Tools	Provides implementation and operational tooling

8. ISO/IEC 42001 Mapping Architecture

The AIGO mapping architecture separates the ISO/IEC 42001 relationship into multiple layers.

8.1 Master Mapping

The master mapping establishes the overall relationship between AIGO and ISO/IEC 42001. Document: 01-AIGO-ISO-42001-Mapping-v0.1.md

8.2 Requirements Mapping

The requirements mapping provides detailed clause-level relationships. Document: 02-AIGO-ISO-42001-Requirements-Mapping-v0.1.md

8.3 Control Mapping

The control mapping establishes relationships between ISO/IEC 42001 AI management controls and AIGO controls. Document: 03-AIGO-ISO-42001-Control-Mapping-v0.1.md

8.4 Lifecycle Mapping

The lifecycle mapping establishes relationships between AI management activities and the AIGO AI governance lifecycle. Document: 04-AIGO-ISO-42001-Lifecycle-Mapping-v0.1.md

8.5 Risk Mapping

The risk mapping establishes relationships between ISO/IEC 42001 risk requirements and the AIGO risk-management framework. Document: 05-AIGO-ISO-42001-Risk-Mapping-v0.1.md

8.6 Governance Mapping

The governance mapping establishes relationships between governance requirements and AIGO governance domains, roles, authorities, and responsibilities. Document: 06-AIGO-ISO-42001-Governance-Mapping-v0.1.md

8.7 Evidence Mapping

The evidence mapping identifies records and evidence that may demonstrate implementation. Document: 07-AIGO-ISO-42001-Evidence-Mapping-v0.1.md

8.8 Implementation Mapping

The implementation mapping connects ISO/IEC 42001 requirements to AIGO implementation guidance and procedures. Document: 08-AIGO-ISO-42001-Implementation-Mapping-v0.1.md

9. High-Level Framework Mapping

The following table establishes the primary relationship between AIGO framework components and ISO/IEC 42001.

AIGO Component	ISO/IEC 42001 Area	Relationship	Status
AIGO Charter	Context, scope, AI management system	Direct	Covered
AIGO Principles	AI policy and governance objectives	Supporting	Covered
Governance Domains	AI governance and management-system structure	Direct	Covered
Governance Roles	Leadership, responsibilities and authorities	Direct	Covered
AI Governance Lifecycle	Operational AI lifecycle governance	Complementary	Covered
AI Risk Management	Risk and opportunity management	Direct	Covered
AI Governance Controls	AI management controls	Direct	Covered
AI Governance Maturity	Performance evaluation and improvement	Supporting	Covered
AI System Profiles	AI system governance and operational traceability	Complementary	Covered
Implementation Guidance	Operational implementation	Supporting	Covered
Operational Procedures	Operational planning and control	Direct	Covered
Templates	Documented information and evidence	Supporting	Planned
Examples	Implementation support	Supporting	Planned
Schemas	Structured governance information	Complementary	Planned
Tools	Operational support	Complementary	Planned

10. Clause 4 Mapping — Context of the Organization

10.1 Organizational Context

AIGO addresses organizational context through:

framework scope;
governance scope;
governance domains;
organizational responsibilities;
AI system profiles;
applicable requirements; and
stakeholder considerations.

Primary AIGO Components:

AIGO-F01 Charter
AIGO-F03 Governance Domains
AIGO-F04 Governance Roles
AIGO-F09 AI System Profiles

Relationship: Direct

11. Clause 4 Mapping — Interested Parties

AIGO addresses interested-party considerations through governance, risk management, lifecycle governance, human oversight, impact considerations, incident management, and assurance. Primary AIGO Components:

AIGO-F02 Principles
AIGO-F03 Governance Domains
AIGO-F05 AI Governance Lifecycle
AIGO-F06 AI Risk Management
AIGO-F07 AI Governance Controls

Relationship: Direct

12. Clause 4 Mapping — Scope

AIGO establishes governance scope through the Charter, governance domains, AI system profiles, organizational boundaries, lifecycle coverage, and risk scope. Primary AIGO Components:

AIGO-F01 Charter
AIGO-F03 Governance Domains
AIGO-F09 AI System Profiles

Relationship: Direct

13. Clause 4 Mapping — AI Management System

AIGO provides an integrated governance architecture consisting of:

governance principles;
governance domains;
governance roles;
lifecycle governance;
risk management;
controls;
maturity;
system profiles;
implementation guidance; and
operational procedures.

Primary AIGO Components:

AIGO-F01 through AIGO-F09
AIGO-G01
AIGO-G02

Relationship: Direct

14. Clause 5 Mapping — Leadership

AIGO defines leadership accountability through governance roles, decision authority, escalation, oversight, risk ownership, and governance reporting. Primary AIGO Components:

AIGO-F01 Charter
AIGO-F03 Governance Domains
AIGO-F04 Governance Roles

Relationship: Direct

15. Clause 5 Mapping — AI Policy

AIGO principles and governance objectives provide a foundation for an organization’s AI policy. Primary AIGO Components:

AIGO-F01 Charter
AIGO-F02 Principles
AIGO-F03 Governance Domains
AIGO-F07 AI Governance Controls

Relationship: Direct

16. Clause 5 Mapping — Roles and Responsibilities

AIGO provides an explicit role and responsibility architecture. This includes:

governance accountability;
AI system ownership;
risk ownership;
control ownership;
approval authority;
escalation authority; and
oversight responsibilities.

Primary AIGO Component:

AIGO-F04 Governance Roles

Relationship: Direct

17. Clause 6 Mapping — Planning

AIGO planning capabilities are primarily provided through risk management, lifecycle governance, controls, governance objectives, and maturity. Primary AIGO Components:

AIGO-F05 AI Governance Lifecycle
AIGO-F06 AI Risk Management
AIGO-F07 AI Governance Controls
AIGO-F08 AI Governance Maturity

Relationship: Direct

18. Clause 6 Mapping — Risks and Opportunities

AIGO provides a dedicated risk-management framework. It includes:

risk identification;
risk analysis;
risk evaluation;
risk treatment;
residual risk;
risk acceptance;
monitoring;
escalation; and
review.

Primary AIGO Component:

AIGO-F06 AI Risk Management

Relationship: Direct

19. Clause 6 Mapping — AI Objectives

AIGO supports governance objectives through:

principles;
governance domains;
controls;
maturity objectives;
monitoring indicators; and
continuous improvement.

Primary AIGO Components:

AIGO-F02 Principles
AIGO-F03 Governance Domains
AIGO-F07 AI Governance Controls
AIGO-F08 AI Governance Maturity

Relationship: Supporting

20. Clause 6 Mapping — Changes

AIGO provides change governance through lifecycle management, risk assessment, controls, and the AI change-management procedure. Primary AIGO Components:

AIGO-F05 AI Governance Lifecycle
AIGO-F06 AI Risk Management
AIGO-F07 AI Governance Controls

Supporting Procedure: guidance/02-procedures/07-AIGO-AI-Change-Management-Procedure-v0.1.md Relationship: Direct

21. Clause 7 Mapping — Support

AIGO supports organizational implementation through:

defined governance roles;
implementation guidance;
procedures;
controls;
maturity requirements; and
governance records.

Primary AIGO Components:

AIGO-F04 Governance Roles
AIGO-F07 AI Governance Controls
AIGO-F08 AI Governance Maturity
AIGO-G01 Implementation Guidance
AIGO-G02 Operational Procedures

Relationship: Supporting Organizational Implementation Required: Yes

22. Clause 7 Mapping — Competence

AIGO establishes governance responsibilities and capability expectations. Organizations must implement:

competency requirements;
training;
role qualification;
awareness activities; and
competency evaluation.

Primary AIGO Components:

AIGO-F04 Governance Roles
AIGO-F08 AI Governance Maturity

Relationship: Supporting Organizational Implementation Required: Yes

23. Clause 7 Mapping — Communication

AIGO provides governance communication mechanisms through:

reporting;
escalation;
incident management;
monitoring;
assurance;
governance reviews; and
stakeholder governance.

Primary AIGO Components:

AIGO-F03 Governance Domains
AIGO-F04 Governance Roles
AIGO-F07 AI Governance Controls

Relationship: Supporting

24. Clause 7 Mapping — Documented Information

AIGO establishes structured governance information through:

AI system profiles;
risk records;
control records;
approval records;
monitoring records;
assurance records;
incident records;
lifecycle records; and
governance records.

Primary AIGO Components:

AIGO-F05 AI Governance Lifecycle
AIGO-F06 AI Risk Management
AIGO-F07 AI Governance Controls
AIGO-F09 AI System Profiles

Relationship: Direct

25. Clause 8 Mapping — Operation

AIGO operationalizes governance through implementation guidance and operational procedures. Operational processes include:

AI governance
AI system registration
AI risk assessment
AI classification
AI control assessment
AI approval
AI change management
AI incident management
AI monitoring
AI assurance
AI risk acceptance
AI retirement
Continuous improvement

Primary AIGO Component:

AIGO-G02 Operational Procedures

Relationship: Direct

26. Clause 8 Mapping — Risk Assessment

AIGO provides an operational AI risk-assessment process. Primary AIGO Component:

AIGO-F06 AI Risk Management

Supporting Procedure: guidance/02-procedures/03-AIGO-AI-Risk-Assessment-Procedure-v0.1.md Relationship: Direct

27. Clause 8 Mapping — Risk Treatment

AIGO connects risk treatment to controls, lifecycle activities, monitoring, assurance, and risk acceptance. Primary AIGO Components:

AIGO-F06 AI Risk Management
AIGO-F07 AI Governance Controls

Relationship: Direct

28. Clause 8 Mapping — AI Lifecycle

AIGO establishes governance throughout the AI lifecycle. Lifecycle coverage includes:

Planning
Design
Development
Data preparation
Testing and validation
Approval
Deployment
Operation
Monitoring
Change
Assurance
Retirement

Primary AIGO Component:

AIGO-F05 AI Governance Lifecycle

Relationship: Complementary

29. Clause 8 Mapping — AI System Governance

AIGO AI System Profiles provide structured information for governing individual AI systems. Profile information supports:

system identification;
ownership;
intended purpose;
classification;
risk;
lifecycle;
controls;
monitoring;
assurance; and
retirement.

Primary AIGO Component:

AIGO-F09 AI System Profiles

Relationship: Complementary

30. Clause 9 Mapping — Performance Evaluation

AIGO performance evaluation capabilities include:

monitoring;
governance metrics;
risk indicators;
control assessment;
assurance;
maturity assessment; and
management reporting.

Primary AIGO Components:

AIGO-F07 AI Governance Controls
AIGO-F08 AI Governance Maturity

Relationship: Direct

31. Clause 9 Mapping — Internal Audit

AIGO provides assurance and control assessment capabilities that can support organizational internal audit. Organizations remain responsible for establishing an internal audit program appropriate to their management-system requirements. Primary AIGO Components:

AIGO-F07 AI Governance Controls
AIGO-F08 AI Governance Maturity

Relationship: Supporting Organizational Implementation Required: Yes

32. Clause 9 Mapping — Management Review

AIGO supports management review through:

governance reporting;
risk reporting;
monitoring;
assurance findings;
maturity assessment;
incidents;
control performance; and
improvement activities.

Primary AIGO Components:

AIGO-F03 Governance Domains
AIGO-F07 AI Governance Controls
AIGO-F08 AI Governance Maturity

Relationship: Supporting Organizational Implementation Required: Yes

33. Clause 10 Mapping — Corrective Action

AIGO provides corrective-action capabilities through:

incident management;
assurance findings;
control assessments;
risk treatment;
root-cause analysis;
remediation; and
continuous improvement.

Primary AIGO Components:

AIGO-F06 AI Risk Management
AIGO-F07 AI Governance Controls
AIGO-F08 AI Governance Maturity

Relationship: Direct

34. Clause 10 Mapping — Continual Improvement

AIGO establishes continuous improvement as an explicit governance capability. Improvement inputs include:

incidents;
monitoring;
assurance;
audits;
risk assessments;
control assessments;
stakeholder feedback;
regulatory developments; and
technology developments.

Primary AIGO Component:

AIGO-F08 AI Governance Maturity

Supporting Guidance: guidance/01-implementation/08-AIGO-Continuous-Improvement-v0.1.md Supporting Procedure: guidance/02-procedures/13-AIGO-Continuous-Improvement-Procedure-v0.1.md Relationship: Direct

35. Annex A Mapping

ISO/IEC 42001 Annex A contains AI management controls. The detailed relationship between Annex A and AIGO controls is maintained separately. Detailed Mapping: 03-AIGO-ISO-42001-Control-Mapping-v0.1.md Primary AIGO Component:

AIGO-F07 AI Governance Controls

Relationship: Direct

36. ISO/IEC 42001 to AIGO Traceability Model

The master traceability model is:

ISO/IEC 42001 Requirement
        ↓
AIGO Framework Component
        ↓
AIGO Governance Capability
        ↓
Implementation Guidance
        ↓
Operational Procedure
        ↓
AIGO Control
        ↓
Governance Record / Evidence
        ↓
Monitoring / Assurance
        ↓
Continuous Improvement

This model establishes the intended relationship between external requirements and AIGO operational implementation.

---

### 37. AIGO to ISO/IEC 42001 Traceability Model

The reverse traceability model provides a way to start from an AIGO framework component and identify the corresponding ISO/IEC 42001 requirements and controls.

```text
AIGO Framework Component
        ↓
ISO/IEC 42001 Requirement
        ↓
ISO/IEC 42001 Control
        ↓
Implementation Relationship
        ↓
Evidence Relationship

This model allows organizations using AIGO to determine which external requirements are supported by each AIGO component.

---

### 38. Master Mapping Matrix

| AIGO Component | ISO/IEC 42001 Relationship | Primary Mapping | Status |
|---|---|---|---|
| AIGO-F01 Charter | Context, scope, management system | Requirements Mapping | Covered |
| AIGO-F02 Principles | Policy, objectives, governance | Requirements Mapping | Covered |
| AIGO-F03 Governance Domains | Governance and organizational context | Governance Mapping | Covered |
| AIGO-F04 Governance Roles | Leadership and responsibilities | Governance Mapping | Covered |
| AIGO-F05 AI Governance Lifecycle | Operational lifecycle governance | Lifecycle Mapping | Covered |
| AIGO-F06 AI Risk Management | Risk assessment and treatment | Risk Mapping | Covered |
| AIGO-F07 AI Governance Controls | AI management controls | Control Mapping | Covered |
| AIGO-F08 AI Governance Maturity | Performance and improvement | Requirements Mapping | Covered |
| AIGO-F09 AI System Profiles | System governance and traceability | Lifecycle Mapping | Covered |
| AIGO-G01 Implementation Guidance | Implementation | Implementation Mapping | Covered |
| AIGO-G02 Operational Procedures | Operation | Implementation Mapping | Covered |
| AIGO-G03 Templates | Documented information | Evidence Mapping | Planned |
| AIGO-G04 Examples | Implementation support | Implementation Mapping | Planned |
| AIGO-S01 Schemas | Structured governance information | Evidence Mapping | Planned |
| AIGO-T01 Tools | Operational support | Implementation Mapping | Planned |

---

### 39. Mapping Status Model

The following statuses shall be used when maintaining AIGO external mappings.

| Status | Meaning |
|---|---|
| Covered | AIGO provides sufficient framework-level coverage |
| Partially Covered | AIGO provides partial coverage |
| Supporting | AIGO supports implementation but does not fully address the requirement |
| Organizational Implementation | Framework coverage exists but organizational implementation is required |
| Planned | Mapping or capability is planned |
| Gap | Coverage is insufficient |
| Not Applicable | Requirement does not apply to the evaluated scope |

---

### 40. Organizational Implementation Boundary

AIGO provides a governance framework.

It does not automatically establish an organization's complete AI management system.

Organizations using AIGO remain responsible for implementing:

- organizational policies;
- governance bodies;
- assigned personnel;
- competence;
- operational processes;
- records;
- evidence;
- internal audits;
- management reviews;
- risk decisions;
- control operation;
- monitoring;
- corrective action; and
- continual improvement.

---

### 41. Certification Boundary

Alignment with ISO/IEC 42001 does not by itself establish conformity or certification.

An organization seeking certification should evaluate:

- the applicable ISO/IEC 42001 requirements;
- certification-body requirements;
- organizational scope;
- management-system evidence;
- implementation effectiveness; and
- applicable legal and regulatory requirements.

---

### 42. Mapping Limitations

This mapping:

- does not reproduce ISO/IEC 42001;
- does not replace the applicable ISO/IEC 42001 standard;
- does not constitute certification;
- does not constitute legal advice;
- does not guarantee conformity;
- does not replace organizational implementation; and
- should be reviewed when the framework or external requirements change.

---

### 43. Mapping Governance

The AIGO ISO/IEC 42001 mapping should be governed as a controlled framework artifact.

Changes should be assessed when:

- AIGO framework components change;
- AIGO controls change;
- AIGO procedures change;
- ISO/IEC 42001 changes;
- interpretation changes;
- assurance findings identify gaps;
- implementation findings identify gaps; or
- organizational requirements change.

---

### 44. Mapping Review

The mapping should be reviewed periodically.

The review should verify:

1. Framework references remain valid.
2. Mapping relationships remain appropriate.
3. External references remain current.
4. Identified gaps are tracked.
5. Organizational implementation dependencies remain accurate.
6. Control mappings remain aligned.
7. Evidence mappings remain aligned.
8. Implementation mappings remain aligned.

**Review Frequency:**


**Next Review Date:**


**Mapping Owner:**


---

### 45. Related Mapping Documents

The following documents form the AIGO ISO/IEC 42001 mapping set:

1. `01-AIGO-ISO-42001-Mapping-v0.1.md`
2. `02-AIGO-ISO-42001-Requirements-Mapping-v0.1.md`
3. `03-AIGO-ISO-42001-Control-Mapping-v0.1.md`
4. `04-AIGO-ISO-42001-Lifecycle-Mapping-v0.1.md`
5. `05-AIGO-ISO-42001-Risk-Mapping-v0.1.md`
6. `06-AIGO-ISO-42001-Governance-Mapping-v0.1.md`
7. `07-AIGO-ISO-42001-Evidence-Mapping-v0.1.md`
8. `08-AIGO-ISO-42001-Implementation-Mapping-v0.1.md`

---

### 46. Document Control

| Field | Value |
|---|---|
| Document | AIGO — ISO/IEC 42001 Master Mapping |
| Version | 0.1 |
| Status | Draft |
| Working Name | AIGO |
| Full Name | AI Governance Operating Framework |
| Document Identifier | AIGO-MAP-ISO42001-001 |
| Mapping Standard | ISO/IEC 42001 |
| Mapping Type | Master Framework Mapping |
| Owner | |
| Approved By | |
| Approval Date | |
| Next Review Date | |

---

### 47. Document Status

**Document:** AIGO — ISO/IEC 42001 Master Mapping

**Version:** 0.1

**Status:** Draft

**Working Name:** AIGO

**Full Name:** AI Governance Operating Framework

**Document Identifier:** `AIGO-MAP-ISO42001-001`

**Document Type:** Master Framework Mapping

This document establishes the master relationship between the AIGO AI Governance Operating Framework and ISO/IEC 42001 and serves as the parent mapping for the detailed ISO/IEC 42001 requirements, controls, lifecycle, risk, governance, evidence, and implementation mappings.

---

​AIGO — ISO/IEC 42001 Master Mapping

​AIGO — AI Governance Operating Framework

​1. Purpose

​2. Scope

​3. Mapping Objectives

​4. Mapping Principles

​4.1 Traceability

​4.2 No Standard Reproduction

​4.3 Framework Independence

​4.4 Risk-Based Alignment

​4.5 Implementation Traceability

​5. Mapping Relationship Types

​5.1 Direct

​5.2 Supporting

​5.3 Partial

​5.4 Complementary

​5.5 Organizational Implementation

​5.6 Gap

​6. AIGO Framework Architecture

​7. AIGO Supporting Architecture

​8. ISO/IEC 42001 Mapping Architecture

​8.1 Master Mapping

​8.2 Requirements Mapping

​8.3 Control Mapping

​8.4 Lifecycle Mapping

​8.5 Risk Mapping

​8.6 Governance Mapping

​8.7 Evidence Mapping

​8.8 Implementation Mapping

​9. High-Level Framework Mapping

​10. Clause 4 Mapping — Context of the Organization

​10.1 Organizational Context

​11. Clause 4 Mapping — Interested Parties

​12. Clause 4 Mapping — Scope

​13. Clause 4 Mapping — AI Management System

​14. Clause 5 Mapping — Leadership

​15. Clause 5 Mapping — AI Policy

​16. Clause 5 Mapping — Roles and Responsibilities

​17. Clause 6 Mapping — Planning

​18. Clause 6 Mapping — Risks and Opportunities

​19. Clause 6 Mapping — AI Objectives

​20. Clause 6 Mapping — Changes

​21. Clause 7 Mapping — Support

​22. Clause 7 Mapping — Competence

​23. Clause 7 Mapping — Communication

​24. Clause 7 Mapping — Documented Information

​25. Clause 8 Mapping — Operation

​26. Clause 8 Mapping — Risk Assessment

​27. Clause 8 Mapping — Risk Treatment

​28. Clause 8 Mapping — AI Lifecycle

​29. Clause 8 Mapping — AI System Governance

​30. Clause 9 Mapping — Performance Evaluation

​31. Clause 9 Mapping — Internal Audit

​32. Clause 9 Mapping — Management Review

​33. Clause 10 Mapping — Corrective Action

​34. Clause 10 Mapping — Continual Improvement

​35. Annex A Mapping

​36. ISO/IEC 42001 to AIGO Traceability Model

AIGO — ISO/IEC 42001 Master Mapping

AIGO — AI Governance Operating Framework

1. Purpose

2. Scope

3. Mapping Objectives

4. Mapping Principles

4.1 Traceability

4.2 No Standard Reproduction

4.3 Framework Independence

4.4 Risk-Based Alignment

4.5 Implementation Traceability

5. Mapping Relationship Types

5.1 Direct

5.2 Supporting

5.3 Partial

5.4 Complementary

5.5 Organizational Implementation

5.6 Gap

6. AIGO Framework Architecture

7. AIGO Supporting Architecture

8. ISO/IEC 42001 Mapping Architecture

8.1 Master Mapping

8.2 Requirements Mapping

8.3 Control Mapping

8.4 Lifecycle Mapping

8.5 Risk Mapping

8.6 Governance Mapping

8.7 Evidence Mapping

8.8 Implementation Mapping

9. High-Level Framework Mapping

10. Clause 4 Mapping — Context of the Organization

10.1 Organizational Context

11. Clause 4 Mapping — Interested Parties

12. Clause 4 Mapping — Scope

13. Clause 4 Mapping — AI Management System

14. Clause 5 Mapping — Leadership

15. Clause 5 Mapping — AI Policy

16. Clause 5 Mapping — Roles and Responsibilities

17. Clause 6 Mapping — Planning

18. Clause 6 Mapping — Risks and Opportunities

19. Clause 6 Mapping — AI Objectives

20. Clause 6 Mapping — Changes

21. Clause 7 Mapping — Support

22. Clause 7 Mapping — Competence

23. Clause 7 Mapping — Communication

24. Clause 7 Mapping — Documented Information

25. Clause 8 Mapping — Operation

26. Clause 8 Mapping — Risk Assessment

27. Clause 8 Mapping — Risk Treatment

28. Clause 8 Mapping — AI Lifecycle

29. Clause 8 Mapping — AI System Governance

30. Clause 9 Mapping — Performance Evaluation

31. Clause 9 Mapping — Internal Audit

32. Clause 9 Mapping — Management Review

33. Clause 10 Mapping — Corrective Action

34. Clause 10 Mapping — Continual Improvement

35. Annex A Mapping

36. ISO/IEC 42001 to AIGO Traceability Model