Detailed questionnaire for ISO/IEC 42001:2023 certification

We'll help you get through the certification process worry-free

This questionnaire serves as preliminary information for the certification body of management systems ELBACERT, a.s. to prepare an informative non-binding offer for ISO/IEC 42001:2023 certification.

Detailed questionnaire for certification offer

The data from the questionnaire will be used discreetly and only for internal matters of ELBACERT, a.s.
If you need any information when filling in this application, we are at your disposal on 0903 470 453.
The data marked with an asterisk are mandatory. The form will take you no more than 5-10 minutes to complete.

"*" indicates required fields

Step 1 of 6 - Part 1

16%

Facebook

This field is for validation purposes and should be left unchanged.

1. Company data

In this section, please fill in your contact and company details.

Business name of the company

optional

Company Headquarters

Street City ZIP / Postal Code

Contact person

Authorised representative to apply for certification

Name and surname of the authorised representative*

Name Last name

Mobile number

E-mail of the authorised representative*

A copy of the questionnaire will be sent to this e-mail address.

Enter another authorised representative

Name and surname

Phone

Specify additional authorized representatives for the certification process.

Specify an additional contact person for communication with the certification body?

Yes

Contact person for communication with the certification body

Complete if different from the organisation representative listed.

Contact persons

Name

Phone

Enter the contact persons for communication with the certification body.

The total number of people in the organization involved in the artificial intelligence lifecycle across all shifts:

Enter number of employees

How many employees are involved in the AI lifecycle?

Part-time employees:

Enter the number of contingent workers, temporary workers

How many part-time employees are there?

AI users:

Enter the number of AI users

How many AI users are there?

AI developers:

Enter the number of AI developers

How many AI developers are there?

AI Administrators:

Enter the number of AI administrators

How many AI administrators are there?

Sites for certification

Which locations outside the company's headquarters will be included in the certification? Please enter the branches, establishments you would like to be listed on the certificate.

Other locations where the organization operates

Cf. Number

Address of the place

Number of workers

Brief description of activities

Scope of Activities

The organization is

AI Developer

AI Provider

AI User

Combined roles

AI Integrator

Consulting firm

Other

Please specify:

B. Scope of Certification

2. Subject of certification

In this section, please provide information regarding the subject of the environmental audit.

Proposed Scope of AIMS

Processes included in the scope

Processes excluded from the scope

The Use of AI in Business

In this section, please provide information about the AI applications and tools your company uses.

What AI tools do you use:

ChatGPT

Copilot

Gemini

Claude

GitHub Copilot

DeepSeek

Custom solution

Other

A list of the AI tools/apps you use.

Please specify the AI tool/application:

In which processes is AI used:

Marketing

For Sale

Support

Data Analysis

Software Development

AI in Critical Processes

Other

Please specify which processes you are referring to:

AI systems

Does the organization keep a record of all the AI systems it uses?

Yes

Is there a list of the AI systems in use?

Yes

Number of AI systems:

Major AI systems

AI Name

Intended use

Internal/External

High-risk? (yes/no)

Please specify the main AI systems used in the organization.

Scope of control measures

Does the number of control measures exceed the scope specified in Annex A of ISO/IEC 42001 by more than 5?

Yes

The number of legislative, regulatory, or industry-specific requirements that the organization must comply with in relation to AI:

Request Title

List examples such as: GDPR, NIS2, AI Act, automotive, medicine, industry-specific regulations...

C. Classification according to AI ACT

Do you use any AI systems that pose a risk under the AI Act?

Prohibited AI systems

High-risk AI systems

Low-risk systems

Select and specify AI systems.

List the following prohibited AI systems:

List the following high-risk AI systems:

List the following low-risk AI systems:

List the following AI systems with minimal risk:

Is there any information or any part of the AI system that, due to the need to protect confidential information, trade secrets, intellectual property, or security requirements, will not be made available to the audit team during the audit?

Yes

Please specify the scope and reason for the access restriction:

D. AI Control

In this section, you can provide and specify additional information regarding AI management. Select an area and fill in the details.

Areas of AI control:

AI Policy

AI goals

AI Committee or Designated Person

Ethical Principles

Select and specify the relevant area, if applicable.

AI Policy Specifications:

AI Target Specifications:

Specifications of the committee / responsible person:

Specifications of Ethical Principles:

F. Risk Management

In this section, you can provide and specify additional information in areas related to risk management, data, and information security. Select the relevant area and provide the details.

Areas of risk management:

Risk Management Methodology

AI Risk Register

AI Impact Assessment

Incident Management

Select and specify the relevant area, if applicable.

Details on the risk management methodology:

Details on the AI risk register:

Details on AI impact assessments:

Details on incident management:

G. Data and Information Security

Data and Information Security:

Secure Sources of Training Data (AI Development)

Data Quality Check

GDPR Compliance

Ensuring Information Security in AI

Ensuring the necessary data retention

Select and specify the relevant area, if applicable.

Details on secure sources of training data:

Details on data quality assurance:

Details about the GDPR:

Details on data retention:

Details on data protection in AI:

H. Human supervision

In this section, you can provide and specify additional information regarding human oversight, suppliers, and outsourcing. Select the area that applies to you and fill in the details.

Human supervision:

Human-in-the-loop

Verification of AI outputs

Approval of AI Decisions

Select and specify the relevant area, if applicable.

Details on the Human-in-the-loop domain:

Details on verifying AI outputs:

Details regarding the approval of AI decisions:

I Suppliers and Outsourcing

Suppliers and outsourcing:

Third parties

Cloud services

Supplier Evaluation

Select and specify the relevant area, if applicable.

Details regarding third parties:

List the third parties.

Details about cloud services:

Details on supplier evaluation:

J. Competence and Training

Certifications and training:

AI Training

AI ACT Training

GDPR Training

Select and specify the relevant area, if applicable.

Details about AI training:

Details on the AI ACT:

Details about GDPR training:

K. Monitoring and Measurement

Monitoring and measurement:

KPIs for AI Systems

Accuracy Monitoring

Bias monitoring

Internal audits

Select and specify the relevant area, if applicable.

Details on AI system KPIs:

Details on accuracy monitoring:

Details on bias monitoring:

Details on internal audits:

L. Integrated Management Systems

Integrated management systems:

ISO 9001

ISO/IEC 27001

ISO 22301

ISO 27701

ISO 37301

Other

Select the ISO standards for which you are certified.

Please specify which ISO standards/certifications you hold:

M. Applicant's Declaration

In this section, please confirm the accuracy and truthfulness of the information provided in the questionnaire.

As the person authorized to submit the certification application, I have filled out all the information truthfully. I also confirm that there is no actual or potential conflict of interest between us (the client) and Elbacert. The client further declares that Elbacert has not participated in any activities related to the design, implementation, management, or operation of the management system and has not provided the client with any consulting services that could affect the independence or objectivity of the certification. The client undertakes to notify Elbacert immediately of any fact that could give rise to a conflict of interest in the future. *

Yes, I confirm.

Date of application

Notes on the questionnaire:

Space for additional information.

Accredited activity

Other certifications and audits

I need certification

Questionnaires

Certification details

Get to know ELBACERT a.s.

About the company

Detailed questionnaire for ISO/IEC 42001:2023 certification

We'll help you get through the certification process worry-free

Detailed questionnaire for certification offer

1. Company data

Contact person

Contact person for communication with the certification body

Sites for certification

Scope of Activities

B. Scope of Certification

2. Subject of certification

The Use of AI in Business

AI systems

Scope of control measures

C. Classification according to AI ACT

D. AI Control

F. Risk Management

G. Data and Information Security

H. Human supervision

I Suppliers and Outsourcing

J. Competence and Training

K. Monitoring and Measurement

L. Integrated Management Systems

M. Applicant's Declaration