For a certification-body auditor, internal audit lead, or consultant auditing an organisation against ISO/IEC 42001:2023 using the TrustedAIGov platform.

This module is a how-to for the audit itself — where each clause's evidence lives, what to test, and what would be a finding. It is deliberately separate from the EU AI Act auditor journey.

Everything here is performed in the customer platform at app.trustedaigov.io under a read-only external-auditor account.

1. Before you sample: what this platform is, and what it never claims — AUD-ISO-101
2. Clause 4: establish the declared scope before you test anything — AUD-ISO-102
3. Clause 6.1.2: draw a risk-based sample from the AI system register — AUD-ISO-103
4. Clauses 6.1.2–6.1.4: trace every sampled system to its assessments — AUD-ISO-104
5. Clause 6.1.3 d: test the Statement of Applicability properly — AUD-ISO-105
6. Clause 7.5: trace control to evidence, and read the approval trail — AUD-ISO-106
7. Clause 7.2: test competence against the high-risk sample — AUD-ISO-107
8. Clauses 9.2 and 10.2: the internal audit programme and CAPA closure — AUD-ISO-108
9. Clause 9.3: management review, frozen snapshots and the Board Pack — AUD-ISO-109
10. What you are refused, and why that is part of the evidence — AUD-ISO-110

Lessons