OneClickComply
    Book a demo

    AI Governance Frameworks

    AI governance and ISO 42001 on the same controls as your ISO 27001

    OneClickComply AI Governance Frameworks lets you work towards ISO/IEC 42001:2023, the NIST AI RMF 1.0, NIST AI 600-1 and the EU AI Act on the same controls, evidence and policies you already use for ISO 27001. It is for compliance and IT leads who need to show customers or an auditor how AI is governed. It does not discover which AI tools your staff use.

    Book a demo
    4 frameworks
    ISO 42001, NIST AI RMF, NIST AI 600-1, EU AI Act
    One control set
    shared with ISO 27001
    Mapped controls
    equivalent, partial or related
    THE PROBLEM

    Why AI governance ends up in four separate spreadsheets

    AI governance requirements are arriving from several directions at once: ISO 42001 certification requests from buyers, AI due diligence questions, and the EU AI Act. Run separately, each one starts a new spreadsheet, a new policy set and a new round of evidence gathering. ISO 42001 follows the same management system structure as ISO 27001, so much of the work overlaps with a system you may already run. The gap is usually keeping it in one place rather than in four.

    FEATURES

    How AI governance frameworks work in OneClickComply

    Four AI frameworks in the standards catalogue

    The Standards area includes ISO/IEC 42001:2023, NIST AI RMF 1.0, NIST AI 600-1 and the EU AI Act, each with its own page that explains what it asks for and who needs it.

    One control set, shared with ISO 27001

    Framework requirements link to the same controls you use for ISO 27001 and other standards. Controls are mapped as equivalent, partial or related, so one control can count towards several frameworks.

    Evidence collected once, reused

    Evidence is attached to a control, and the same control can be mapped to several frameworks, so you can reuse proof for ISO 27001 and ISO 42001 rather than collecting it twice.

    Policies and the risk register in the same place

    Documents move from draft to review, approval and publication, and the risk register and vendor risk tools sit alongside them, so your AI policy and AI risk records live with the rest of your management system.

    Guidance from the assistant

    OccyAI, the in-app assistant, answers questions about frameworks and the platform, with usage limits that depend on plan. Treat its answers as guidance to review, not as advice that replaces your own assessment.

    Your own framework or controls

    Where a requirement is not in the catalogue, custom frameworks and controls let you add it. Availability depends on plan.

    See AI Governance Frameworks working on your own setup.

    Book a demo
    BENEFITS

    What one shared control set gives you

    ISO 42001, NIST AI RMF, NIST AI 600-1 and the EU AI Act managed beside ISO 27001

    Overlapping requirements handled once through shared controls and evidence

    AI policies and AI risks recorded in the same system as your other policies and risks

    A clear view of what the platform does and does not do for AI governance

    A single place to point an auditor or customer to when they ask how AI is governed

    FAQ

    AI Governance Frameworks: common questions

    AI governance is the set of policies, roles, risk assessments and controls an organisation uses to develop, provide or use AI responsibly. Frameworks such as ISO 42001 and the NIST AI RMF turn it into requirements you can evidence.

    Yes. ISO/IEC 42001:2023 is in the standards catalogue and links to the same controls, evidence and policies as ISO 27001. OneClickComply is not a certification body, so certification itself is carried out by an accredited certification body.

    The EU AI Act is in the standards catalogue, and its requirements link to the shared control set so evidence you already hold can be reused for it. It helps you organise and evidence your controls, and it does not classify your AI systems or give legal advice.

    No. OneClickComply does not discover shadow AI or keep an inventory of AI systems, and it does not govern AI agents. You record and assess your AI use against the framework requirements yourselves.

    The catalogue includes ISO/IEC 42001:2023, NIST AI RMF 1.0, NIST AI 600-1 (the generative AI profile) and the EU AI Act. Each has its own page under Standards.

    Both follow the same management system structure, so clauses such as leadership, risk, documented information and internal review overlap. ISO 42001 adds AI-specific requirements such as AI risk and impact assessment, which is why running it on an ISO 27001 control set saves effort.

    Frameworks AI Governance Frameworks supports

    Read what each framework asks for and how OneClickComply covers it.

    See AI Governance Frameworks on your own stack

    Book a 30-minute demo and see how AI Governance Frameworks works with the tools and frameworks you already have.

    Book a demo See pricing