RedHub AIRedHub AI
Tool Gate · How it works

How the roll-up gate works

How the ISO 42001 AIMS Readiness & Gap Diagnostic works

This tool grades your AI Management System across the six ISO 42001 clause-groups, then takes the weakest - with a mandatory-clause floor gate that blocks certification. It reads 6 clause-groups and rolls them into one verdict — the worst, never the average — then a gate that can only make it worse.

The 6 clause-groups

01Context & Leadership · Clauses 4-5100 / 100MATURE
02AI Policy · Clause 5.2 · mandatory100 / 100 · mandatoryMATURE
03Risk & Impact Assessment · Clauses 6 & 8, Annex A · mandatoryfix first40 / 100 · mandatory · at the 40 floorPARTIAL
04Operational Controls · Clause 8, Annex A80 / 100MATURE
05Performance & Internal Audit · Clause 980 / 100MATURE
06Management Review & Improvement · Clauses 9.3 & 10 · mandatory80 / 100 · mandatoryMATURE
CERTIFIABLE
the weakest clause-group is MATURE (75+) and no mandatory group sits at the floor
GAPS TO CLOSE
the weakest clause-group is PARTIAL (40-74) and no mandatory group is at the floor
NOT READY
the weakest clause-group is ABSENT, or a mandatory clause-group sits at or below the 40 floor
Mandatory-clause floor gate · worsen-only

The verdict is the weakest clause-group, never the average. Three clause-groups are mandatory — AI Policy, Risk & Impact Assessment, and Management Review. If any mandatory group sits at or below the 40 floor, the diagnostic reads NOT READY on its own, because a certification body will not average past a load-bearing control that weak.

NOT READY

Why: Five of six clause-groups are strong (80-100) and the mean reads 80 - but the verdict is the weakest clause-group, never the average. Risk & Impact Assessment sits at 40, exactly the floor, and it is a mandatory clause-group: on its own score it would read GAPS TO CLOSE, but the mandatory-clause floor gate escalates the whole diagnostic to NOT READY. A mandatory control this weak blocks certification no matter how mature the rest of the AIMS looks. weakest 40 / 100 · mean 80 (context) · mandatory group at the floor · worst-not-average.

Fix firstRisk & Impact Assessment (Clauses 6 & 8, Annex A) at 40 / 100 - the mandatory clause-group at the floor. Lift it above the 40 floor first; it is the constraint holding the AIMS at NOT READY.

No single clause-group is the crisis — the clustering is. The roll-up takes the worst, the gate escalates when trouble compounds, and it names the one thing to fix first. A readiness diagnostic, not legal advice. This is a self-assessment and gap diagnostic — not an ISO 42001 certification, a certification audit, or an accredited audit opinion. ISO does not certify organizations; certification is performed by independent accredited bodies. Effective dates are planning context only. It grades the management system you describe and scores no person. Confirm certification scope and obligations with a qualified auditor or counsel.