ISO/IEC 42001 Lead Auditor Training — Lesson 1: AIMS Requirements, Audit Programme, Scope, and Criteria

Learning Objectives

• Interpret the principles, requirements, roles, and dependencies shaping aims requirements, audit programme, scope, and criteria.
• Apply the workflow and produce AIMS audit programme and plan that can withstand review.
• Analyze “the AI inventory omits embedded models” and recommend a proportionate evidence-based response.

Detailed Topics

• AIMS requirements
• audit principles
• audit programme
• audit scope
• audit criteria
• AI inventory
• auditor competence
• independence
• Competence, communication, governance, documented information, risk, and follow-up

Instructor Demonstration

The instructor demonstrates the aims requirements, audit programme, scope, and criteria workflow, identifies applicable inputs and responsibilities, records checkpoints in AIMS audit programme and plan, and contrasts the accepted state with a condition where the AI inventory omits embedded models.

Hands-On Exercise

Complete a controlled implementation, audit, analysis, or foundation exercise for AIMS Requirements, Audit Programme, Scope, and Criteria. Establish scope and criteria, collect or create evidence, examine “the AI inventory omits embedded models,” reach a supported conclusion, and preserve the result in AIMS audit programme and plan.

1. Confirm objectives, scope, roles, criteria, stakeholders, and expected outputs.
2. Perform planned activities while recording assumptions, evidence, and decisions.
3. Test a normal case, an exception, and a follow-up or improvement condition.
4. Document conclusions, owners, due dates, escalation, and verification requirements.

Scenario Analysis

• Identify the requirement or principle with the strongest influence on aims requirements, audit programme, scope, and criteria.
• Compare two defensible responses and explain governance, risk, and evidence trade-offs.
• Determine how AIMS audit programme and plan should be approved, retained, reviewed, and updated.

Troubleshooting Guidance

Separate missing evidence from ineffective practice, and distinguish a documentation issue from a control, process, governance, or competence failure. Use AIMS audit programme and plan to trace the earliest divergence. Treat “the AI inventory omits embedded models” as a hypothesis until the response is validated against the relevant requirement and intended outcome.

Validation Checklist

• The scope, criteria, stakeholders, and intended outcome for aims requirements, audit programme, scope, and criteria are explicit.
• The AIMS audit programme and plan links statements and decisions to objective, reviewable support.
• Responsibilities, competence, communication, risk, legal duties, and change impact were considered.
• Findings, corrective actions, monitoring, review triggers, and improvement ownership are clear.

Lesson Outcome

Learners can apply AIMS Requirements, Audit Programme, Scope, and Criteria, explain the reasoning, and defend the result through AIMS audit programme and plan.