Bern, Lisbon, New York info@ai-ei.org +351 93 832 8533
Assessment Platform
All assessments

ISO/IEC 42005 AI Impact Assessment Readiness

Whether you assess effects on individuals, groups and society in a structured, repeatable and documented way.

ISO Impact Assessment 30 questions About 15 minutes Free, no account
Step 1 of 2 Organisation context
Organisation context

This shapes the recommendations you get at the end. Nothing here changes your score.

Please enter your organisation name.

Please enter a valid email address.

Please choose an option.

Please choose an option.

Please choose an option.

Please choose an option.

Choose another framework

Self-assessment only. Not legal advice, not an audit opinion, and not certification.

Readiness questions

Answer all 30 questions as honestly as you can. There are no right or wrong answers; an honest picture produces a useful action plan.

01

Impact Assessment Process

01 Is there a documented process requiring impact assessments for AI systems, with defined responsibilities?

Critical requirement, weight 3

02 Are criteria defined for when an AI impact assessment is required (new system, major change, new use case)?

Critical requirement, weight 3

03 Is the impact assessment process integrated with your AI risk management and governance processes?

Important requirement, weight 2

04 Are personnel performing impact assessments competent and supported with templates and guidance?

Important requirement, weight 2

02

Scoping the Assessment

05 Is the AI system’s intended purpose, functionality, and context of use documented before assessment?

Critical requirement, weight 3

06 Are reasonably foreseeable misuse and unintended uses of the AI system considered in scope?

Critical requirement, weight 3

07 Are the data sources, model characteristics, and system dependencies described for each assessment?

Important requirement, weight 2

08 Is the deployment environment (geography, sector, affected population) documented?

Important requirement, weight 2

03

Stakeholder Identification

09 Are individuals directly affected by the AI system identified (users, subjects of decisions)?

Critical requirement, weight 3

10 Are indirectly affected groups and communities identified (e.g., excluded or misclassified groups)?

Critical requirement, weight 3

11 Are vulnerable groups explicitly considered (children, elderly, persons with disabilities, minorities)?

Critical requirement, weight 3

12 Are broader societal impacts considered (labour, environment, democratic processes, information integrity)?

Important requirement, weight 2

04

Impact Analysis

13 Are potential benefits of the AI system documented alongside potential harms?

Important requirement, weight 2

14 Are potential harms analysed across relevant dimensions (safety, fairness, privacy, economic, psychological)?

Critical requirement, weight 3

15 Is the severity, likelihood, and reversibility of potential harms assessed?

Critical requirement, weight 3

16 Does the analysis consider impacts arising from data quality, bias, or unrepresentative training data?

Critical requirement, weight 3

17 Does the analysis consider transparency and explainability impacts on affected persons?

Important requirement, weight 2

05

Sensitive and High-Impact Uses

18 Are sensitive use cases flagged for enhanced review (health, employment, credit, law enforcement, education)?

Critical requirement, weight 3

19 Is there an approval gate (e.g., ethics board or senior review) for high-impact AI systems before deployment?

Critical requirement, weight 3

20 Are legal and regulatory obligations relevant to the use case identified during the assessment?

Important requirement, weight 2

06

Mitigation and Follow-up

21 Are mitigation measures defined for significant negative impacts, with owners and deadlines?

Critical requirement, weight 3

22 Are decisions to proceed, modify, or halt an AI system based on impact assessment results documented?

Critical requirement, weight 3

23 Are mitigation measures verified for effectiveness after implementation?

Important requirement, weight 2

24 Is there a mechanism for affected persons to raise concerns or seek redress?

Important requirement, weight 2

07

Documentation and Communication

25 Are impact assessment results documented in a consistent, retrievable format?

Important requirement, weight 2

26 Are results communicated to relevant decision-makers and governance bodies?

Important requirement, weight 2

27 Are summaries of impact assessments made available to relevant stakeholders where appropriate?

Important requirement, weight 2

08

Review and Re-assessment

28 Are impact assessments reviewed at planned intervals during the AI system’s operation?

Important requirement, weight 2

29 Do significant changes (model updates, new data, new user groups) trigger re-assessment?

Critical requirement, weight 3

30 Are lessons from incidents and monitoring fed back into future impact assessments?

Important requirement, weight 2

Results are generated instantly. Self-assessment only, not an audit.