Who oversees, who decides, who answers. Can you name the person who can stop the system, and the person who answers for it?
Home / The register
47 units, 142 evidence items
The human oversight register
One testable unit per row. Each cites a held clause, states the requirement in our words, and names the evidence, the common gap and the questions to ask. The FDIS body is not public; the register states what the held standards require, not what the draft says clause by clause.
01How to read it
One row, one testable control
The register has six themes: accountability, impact, life cycle, information, use and assurance. Every unit belongs to one theme, cites one held clause, and carries three evidence items on average. The citations are to ISO/IEC 42001:2023, ISO/IEC 42005:2025, the EU AI Act and NIST AI RMF 1.0.
Start with the theme that matches the question in front of you, then open the unit. Each unit page is a file note: requirement, what it means for oversight, how to evidence it, the common gaps and the questions. The paid kit turns the same rows into a working spreadsheet and a dated plan.
- Ref is our unit number and is stable across editions.
- Held citation is the clause the requirement is stated from.
- Evidence is the number of artefacts the auditor asks for, not a score.
02The themes
Six themes
T1 · 14 unitsAccountability
T2 · 8 unitsImpact
What the system can do to people. Does the file name the people the system can harm, and the harm the overseer is watching for?
T3 · 8 unitsLife cycle
Design, validate, deploy, operate, stop. Is oversight designed in, tested before release, and still exercisable at production volume?
T4 · 6 unitsInformation
What the overseer and the affected person are told. Does the person at the screen know what the system cannot do, and what to do when it fails?
T5 · 6 unitsUse
Responsible use, intended use and the decision. Is the system used as intended, by competent people, with a real ability to refuse its output?
T6 · 5 unitsAssurance
Measure, audit, correct, improve. Could you prove to an auditor that oversight operated last quarter, with dates and names?
03The table
All 47 units
| Ref | Oversight unit | Theme | Held citation | Evidence |
|---|---|---|---|---|
| OH-01 | Context and the role you play | Accountability | ISO/IEC 42001:2023, 4.1 | 3 |
| OH-02 | What the management system covers | Accountability | ISO/IEC 42001:2023, 4.3 | 3 |
| OH-03 | The AI policy | Accountability | ISO/IEC 42001:2023, 5.2 | 3 |
| OH-04 | Roles, responsibilities and authorities | Accountability | ISO/IEC 42001:2023, 5.3 | 3 |
| OH-05 | AI risk assessment | Life cycle | ISO/IEC 42001:2023, 6.1.2 | 3 |
| OH-06 | Impact assessment at planning | Impact | ISO/IEC 42001:2023, 6.1.4 | 3 |
| OH-07 | AI objectives and plans | Accountability | ISO/IEC 42001:2023, 6.2 | 3 |
| OH-08 | Competence of the overseer | Use | ISO/IEC 42001:2023, 7.2 | 3 |
| OH-09 | Awareness of the policy | Accountability | ISO/IEC 42001:2023, 7.3 | 3 |
| OH-10 | Documented information | Information | ISO/IEC 42001:2023, 7.5 | 3 |
| OH-11 | Operational planning and control | Life cycle | ISO/IEC 42001:2023, 8.1 | 3 |
| OH-12 | Impact assessment in operation | Impact | ISO/IEC 42001:2023, 8.4 | 3 |
| OH-13 | Monitoring and measurement | Assurance | ISO/IEC 42001:2023, 9.1 | 3 |
| OH-14 | Internal audit | Assurance | ISO/IEC 42001:2023, 9.2 | 3 |
| OH-15 | Management review | Accountability | ISO/IEC 42001:2023, 9.3 | 3 |
| OH-16 | Continual improvement | Assurance | ISO/IEC 42001:2023, 10.1 | 3 |
| OH-17 | Nonconformity and corrective action | Assurance | ISO/IEC 42001:2023, 10.2 | 3 |
| OH-18 | AI roles and responsibilities | Accountability | ISO/IEC 42001:2023, A.3.2 | 3 |
| OH-19 | Reporting of concerns | Accountability | ISO/IEC 42001:2023, A.3.3 | 3 |
| OH-20 | Human resources for AI | Accountability | ISO/IEC 42001:2023, A.4.6 | 3 |
| OH-21 | The impact assessment process | Impact | ISO/IEC 42001:2023, A.5.2 | 3 |
| OH-22 | Impact on individuals and groups | Impact | ISO/IEC 42001:2023, A.5.4 | 3 |
| OH-23 | Societal impacts | Impact | ISO/IEC 42001:2023, A.5.5 | 3 |
| OH-24 | Verification and validation | Life cycle | ISO/IEC 42001:2023, A.6.2.4 | 3 |
| OH-25 | Operation and monitoring | Life cycle | ISO/IEC 42001:2023, A.6.2.6 | 3 |
| OH-26 | Event logs | Life cycle | ISO/IEC 42001:2023, A.6.2.8 | 3 |
| OH-27 | Information for users | Information | ISO/IEC 42001:2023, A.8.2 | 3 |
| OH-28 | Communicating incidents | Information | ISO/IEC 42001:2023, A.8.4 | 3 |
| OH-29 | Information for interested parties | Information | ISO/IEC 42001:2023, A.8.5 | 3 |
| OH-30 | Responsible use | Use | ISO/IEC 42001:2023, A.9.2 | 3 |
| OH-31 | Intended use | Use | ISO/IEC 42001:2023, A.9.4 | 3 |
| OH-32 | Allocating responsibilities with third parties | Accountability | ISO/IEC 42001:2023, A.10.2 | 3 |
| OH-33 | Assessment responsibilities | Accountability | ISO/IEC 42005:2025, 5.6 | 3 |
| OH-34 | Thresholds for sensitive and restricted uses | Impact | ISO/IEC 42005:2025, 5.7 | 3 |
| OH-35 | Performing the assessment | Impact | ISO/IEC 42005:2025, 5.8 | 3 |
| OH-36 | Approval of the assessment | Life cycle | ISO/IEC 42005:2025, 5.11 | 3 |
| OH-37 | Monitoring and review of the assessment | Use | ISO/IEC 42005:2025, 5.12 | 3 |
| OH-38 | Explainability | Use | ISO/IEC 42005:2025, 6.8.2.8 | 3 |
| OH-39 | Human oversight in the EU AI Act | Use | EU AI Act, Article 14 | 3 |
| OH-40 | Deployer obligations | Accountability | EU AI Act, Article 26 | 4 |
| OH-41 | Transparency to deployers | Information | EU AI Act, Article 13 | 3 |
| OH-42 | Record-keeping and logs | Information | EU AI Act, Article 12 | 3 |
| OH-43 | Post-market monitoring | Assurance | EU AI Act, Article 72 | 3 |
| OH-44 | Roles in the human-AI configuration | Accountability | NIST AI RMF 1.0, GV-3.2 | 3 |
| OH-45 | Knowledge limits and oversight information | Impact | NIST AI RMF 1.0, MP-2.2 | 3 |
| OH-46 | Oversight processes defined and assessed | Life cycle | NIST AI RMF 1.0, MP-3.5 | 3 |
| OH-47 | Disengage or deactivate the system | Life cycle | NIST AI RMF 1.0, MN-2.4 | 3 |
The table is server rendered. The same rows drive the unit pages, the kit, the API and the free check, so a change to one row changes every output.
The human oversight kit, USD 799 one off.
The 47-unit register, the 142-item evidence index, the 120-day plan and the gap questions, as PDF, CSV and XLSX. Five labelled rows are free on the specimen page.