Does the file name the people the system can harm, and the harm the overseer is watching for?
The assessment of consequences that gives oversight its purpose. This theme covers the impact process, the affected parties, the thresholds, the societal view and the information the operator needs about limits.
What good looks like
An impact assessment with beneficial and adverse impacts, vulnerable groups, misuse scenarios and a threshold decision.
What goes wrong
A privacy-only assessment, no vulnerable groups, and a risk register that never reaches the operator.
The 8 units in this theme
| Ref | Oversight unit | Theme | Held citation | Evidence |
|---|---|---|---|---|
| OH-06 | Impact assessment at planning | Impact | ISO/IEC 42001:2023, 6.1.4 | 3 |
| OH-12 | Impact assessment in operation | Impact | ISO/IEC 42001:2023, 8.4 | 3 |
| OH-21 | The impact assessment process | Impact | ISO/IEC 42001:2023, A.5.2 | 3 |
| OH-22 | Impact on individuals and groups | Impact | ISO/IEC 42001:2023, A.5.4 | 3 |
| OH-23 | Societal impacts | Impact | ISO/IEC 42001:2023, A.5.5 | 3 |
| OH-34 | Thresholds for sensitive and restricted uses | Impact | ISO/IEC 42005:2025, 5.7 | 3 |
| OH-35 | Performing the assessment | Impact | ISO/IEC 42005:2025, 5.8 | 3 |
| OH-45 | Knowledge limits and oversight information | Impact | NIST AI RMF 1.0, MP-2.2 | 3 |
Work the theme, not the document
Open one unit, answer its three questions, and attach the evidence it names. Then move to the next. The theme is complete when every row has a named owner, a dated artefact and a recorded answer to the questions. That is a higher bar than a policy, and a lower bar than a certification.
The paid kit carries the same rows with the owner, due date and status columns already in place, and a dated plan that sequences the six themes across the 120 days to the planning date.
The human oversight kit, USD 799 one off.
The 47-unit register, the 142-item evidence index, the 120-day plan and the gap questions, as PDF, CSV and XLSX. Five labelled rows are free on the specimen page.