ASE Cloud Services Chatbot Interface
ISO/IEC 42001 GAP Assessment: your AI readiness and AI Act compliance assessment
Find out within a few weeks where you stand and what steps you need to take to ensure you’re compliant with the AI Act.
ASE’s ISO/IEC 42001 GAP Assessment evaluates how AI-ready your organisation is and how well you comply with the EU AI Act. You will receive a report showing where you stand today and what specific steps you need to take, ready for your auditor.
What is an ISO/IEC 42001 GAP Assessment?
One day, the question will come. From an auditor, a major customer, the board of directors, or a regulator. Not “Do you use AI?” but “Show us that you have it under control.” From August 2, 2026, the EU AI Act places increasingly specific requirements on organisations. The ISO/IEC 42001 GAP Assessment shows you where you stand today and which concrete steps you need to take, in a report designed to stand up to auditor scrutiny.
No lengthy theoretical report that disappears into a drawer. You receive a concrete gap analysis, an overview of the key AI risks facing your organisation, and a prioritized roadmap. Prepared by professionals who are themselves ISO/IEC 42001 certified.
You may think: our legal counsel or privacy officer will keep track of this. But the AI Act requires more than a legal perspective—it covers the entire AI lifecycle, from data quality to human oversight.
With the ISO/IEC 42001 GAP Assessment, we systematically assess how AI is used, controlled, and governed within an organisation. We look not only at policies and IT setup, but explicitly at day-to-day practice as well. Based on interviews, document analysis, and a review of existing measures, we assess your current situation against the requirements of an AI Management System. This includes governance, risk management, data quality, transparency, awareness, and human oversight throughout the entire AI lifecycle.
The outcome is a practical report providing insight into your current maturity against ISO/IEC 42001, a concrete gap analysis, the key AI risks, and a roadmap with recommendations for closing the gaps. This enables your organisation to work purposefully toward responsible, controlled, and compliant AI use, including in relation to relevant laws and regulations such as the EU AI Act. The GAP Assessment also serves as an AI Act readiness assessment, helping you identify before August 2026 which risk categories your AI systems fall into.
The time required depends on the size and complexity of the organisation. For a complete assessment, including delivery and presentation of the report, you should typically allow for 40 to 60 hours.
What Our Assessment Looks Like:
- Kick-off and Intake: Together, we define the scope and coordinate with the right people within your organisation.
- Interviews and Document Analysis: We assess day-to-day practice against the requirements of an AI Management System across the entire AI lifecycle.
- Risk Assessment: A clear overview of the key AI risks affecting your organisation.
- Maturity Report and Gap Analysis: You’ll see where you currently stand against ISO/IEC 42001 and which gaps need to be addressed.
- Prioritized Roadmap: Concrete recommendations ranked by importance, so you immediately know where to start.
- Management Presentation: We personally present the findings, ready for you to take to your executive team or board of directors.
Do you know how AI is being used, controlled, and governed within your organisation?
With the ISO/IEC 42001 GAP Assessment, you gain the insights and roadmap needed to deploy AI responsibly, in a controlled manner, and in compliance with relevant requirements.
DOWNLOAD OUR ONE-PAGER FOR THE GAP ASSESSMENT HERE
With our GAP Assessment, you gain a clear understanding of where your organisation stands in terms of AI and receive a concrete roadmap toward responsible, controlled, and compliant AI use.
Get in TouchFrequently Asked Questions
Why should I start a GAP Assessment now?
The EU AI Act is placing increasingly specific requirements on organisations that use or develop AI. A GAP Assessment helps you systematically work toward responsible and compliant AI use—before regulators or customers start asking for proof.
What is the ISO/IEC 42001 GAP Assessment?
A practical maturity assessment that evaluates your current AI readiness against the requirements of ISO/IEC 42001, including a risk assessment and a concrete roadmap toward compliant AI use.
What does a GAP Assessment deliver in concrete terms?
A practical report showing your current maturity against ISO/IEC 42001, a concrete gap analysis, the key AI risks facing your organisation, and a prioritized roadmap with recommendations.
How do you approach the assessment?
We assess your current practices against the requirements of an AI Management System through interviews with key stakeholders, document analysis, and a review of existing measures across the entire AI lifecycle.
What exactly do you assess?
This includes AI governance alignment, risk management, data quality, transparency, awareness, and human oversight.
Do we need to be ISO/IEC 42001 certified already to get started?
No. It is specifically a maturity assessment designed to show where you stand today and which steps are needed next. You don’t need to have anything in place yet to get started.
Who conducts the assessment?
We conduct the assessment ourselves with our own specialists, drawing on practical experience from our own AI platform, which is certified against four ISO standards. You don’t receive a theoretical report, but a practical blueprint you can apply directly.
Do you also provide support after the GAP Assessment?
Yes. The assessment results in a concrete roadmap. We can support you with prioritization and implementation, or provide you with the documentation so you can take the next steps internally or with another provider.
How much time will this take internally?
A full assessment typically takes 40 to 60 hours, depending on your organisation’s size and complexity. We handle most of the work: from your team, we mainly need time for the interviews and for providing existing documentation. This keeps the workload for your team to a minimum.
About the Author
Alain van Zwol
Founder of ASE Cloud Services
Alain van Zwol is the founder of ASE Cloud Services and works daily on European, GDPR-compliant cloud and AI solutions. Through ASE, he supports organisations in transitioning to a sovereign workplace without dependence on American tech giants. Learn more about Alain and the team on the About Us page.
Sebastiaan Hoogeveen
Co-founder of ASE Cloud Services
Sebastiaan Hoogeveen is co-founder of ASE Cloud Services and combines his background as a mechanical engineer with a specialisation in AI engineering. His experience with C++ during his studies provides a strong technical foundation for his work as an AI engineer. Calm, punctual and composed, he likes to keep an overview, and as a team player and connector, he translates complex technology into practical AI solutions. Learn more about Sebastiaan and the team on the About Us page.