GRCLibrary.ai

Framework

AI System Audit and Certification Framework

This framework defines the audit and certification approach for AI systems within the organization. It establishes the audit programme structure, evidence requirements, audit frequency by audit tier, the certification pathway to ISO/IEC 42001:2023, post-market monitoring obligations, conformity assessment requirements for EU AI Act high-risk systems, and the integration of audit findings into the corrective and preventive action (CAPA) process.

Type
Framework
Version
1.0.26
Date
2026-10-30
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
AI Governance
Review frequency
6 to 12 months and upon material AI governance or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose and scope
  • 2. Governance
  • 3. AI system audit classification and frequency
  • 4. Audit evidence catalogue
  • 5. Internal audit process
  • 6. ISO/IEC 42001:2023 certification roadmap
  • 7. High-risk AI act conformity assessment
  • 8. Post-market monitoring obligations
  • 9. Audit findings and CAPA integration
  • 10. Framework alignment

Frameworks it maps to

Related documents