Could you prove to an auditor that oversight operated last quarter, with dates and names?
The evidence that the oversight works. This theme covers monitoring and measurement, internal audit, nonconformity and corrective action, continual improvement and post-market monitoring.
What good looks like
A measurement plan, an audit programme, a nonconformity register and a management review minute.
What goes wrong
Metrics collected but never analysed, an audit programme on paper, and corrective action with no effectiveness review.
The 5 units in this theme
| Ref | Oversight unit | Theme | Held citation | Evidence |
|---|---|---|---|---|
| OH-13 | Monitoring and measurement | Assurance | ISO/IEC 42001:2023, 9.1 | 3 |
| OH-14 | Internal audit | Assurance | ISO/IEC 42001:2023, 9.2 | 3 |
| OH-16 | Continual improvement | Assurance | ISO/IEC 42001:2023, 10.1 | 3 |
| OH-17 | Nonconformity and corrective action | Assurance | ISO/IEC 42001:2023, 10.2 | 3 |
| OH-43 | Post-market monitoring | Assurance | EU AI Act, Article 72 | 3 |
Work the theme, not the document
Open one unit, answer its three questions, and attach the evidence it names. Then move to the next. The theme is complete when every row has a named owner, a dated artefact and a recorded answer to the questions. That is a higher bar than a policy, and a lower bar than a certification.
The paid kit carries the same rows with the owner, due date and status columns already in place, and a dated plan that sequences the six themes across the 120 days to the planning date.
The human oversight kit, USD 799 one off.
The 47-unit register, the 142-item evidence index, the 120-day plan and the gap questions, as PDF, CSV and XLSX. Five labelled rows are free on the specimen page.