GbetruAIMS Pro is a professional-grade ISO/IEC 42001:2023 AI Management System toolkit comprising 74 auditor-ready artifacts across 11 modules and two delivery plans. It provides every document, template, checklist, policy, register and guidance workbook an organisation needs to implement a fully compliant AI Management System (AIMS) — from foundation governance through to multi-standard integration and UKAS-accredited certification.

The toolkit is structured around two delivery plans:

• Plan 1 — ISO/IEC 42001 Standalone: Six modules (Modules 1–6) covering every mandatory clause (4–10) and all four Annexes (A, B, C, D). Available in Tier 1 (49 artifacts) and Tier 2 (53 artifacts).
• Plan 2 — Integrated Management System: Five integration modules (Modules A–E) enabling simultaneous implementation with ISO 9001, ISO 27001, ISO 45001 and ISO 14001, culminating in the Total IMS Bundle. Available in Tier 3 (74 artifacts + White Label Rebrand Licence).

It was developed by Dr G. Betru (PhD, FICE, CEng, CQP, MCQI), drawing on more than three decades of major infrastructure delivery, executive leadership and quality management experience — including founding and leading the Ethiopian Railways Corporation from 2007 to 2017.

Plan 1 of GbetruAIMS Pro is built around six progressive implementation modules, each producing a complete set of auditor-ready documents for a distinct phase of your AIMS:

• Module 1 — Foundation Pack (Clauses 4, 5, 7, 8, 9, 10) — 11 artifacts: Six core governance documents (AI Policy, Context of Organisation, Interested Parties Register, Roles & Responsibilities Register, Leadership Commitment Declaration, AI Ethics Statement) plus four clause-specific implementation plans covering Support, Operations, Performance Evaluation and Improvement — and the Module 1 Master Index.
• Module 2 — Planning & Risk (Clause 6) — 6 artifacts: AI Risk Assessment Methodology (AIMS-RSM-001), AI System Impact Assessment template (AIMS-ASI-001), AI Risk Register (AIMS-RSK-001), AI Objectives Register with KPIs (AIMS-OBJ-001), AI Opportunities Log (AIMS-OPP-001), and Risk Treatment Plan with Appetite Statement (AIMS-RST-001).
• Module 3 — Annex A Controls (38 Controls) — 11 artifacts: Complete implementation pack for all 38 Annex A controls across 9 control groups (A.2 Policies through A.10 Documentation) — including the 38 Controls Checklist, AI Use Policy, Human Oversight Policy, AI Steering Committee Charter, AI Systems Register, Infrastructure Inventory, Model Development SOP, Data Governance Policy, Supplier Assessment Form, Incident Report Log, and Document Control Policy.
• Module 4 — Annex B Sector Guidance — 5 workbooks + index: Worked example guides for all 38 controls, plus dedicated sector implementation workbooks for Construction & Infrastructure (B02), Transportation (B03), Small & Medium Business (B04, for organisations under 50 staff), and Large Corporate Governance (B05, for 500+ staff organisations).
• Module 5 — Annex D Operations — 5 artifacts + index: Operational governance documents covering the Internal AI Use Register (AIMS-D1-AIR — the master inventory of every AI system used, with EU AI Act classification), HR AI Use Policy (AIMS-D2-HRP), AI Procurement Assessment Checklist (AIMS-D3-PAC — 33-criterion scored assessment), Internal AI Audit SOP (AIMS-D4-AUD), and the AI Awareness Training Plan (AIMS-D5-TRP — seven-module role-differentiated programme).
• Module 6 — Audit Readiness Pack — 7 artifacts: Internal Audit Plan & Programme (AIMS-M6-AUP), Corrective Action Plan Template (AIMS-M6-CAP), Certification Body Selection Guide (AIMS-M6-CBS), Management Review Agenda & Minutes (AIMS-M6-MRM), Nonconformity Report Templates (AIMS-M6-NCR), Stage 1 Documentation Checklist (AIMS-M6-S1C), and Stage 2 Evidence Checklist (AIMS-M6-S2C).

The AI Awareness Training Plan (AIMS-D5-TRP) is a seven-module, role-differentiated training programme that fulfils ISO 42001:2023 Clauses 7.2 (Competence) and 7.3 (Awareness). It is included in Module 5 across all three product tiers.

The seven training modules are:

• TRN-01 — All-Staff AI Awareness: Mandatory for 100% of the workforce; must be delivered before certification audit
• TRN-02 — Policy Induction: Covers the AI Use Policy and Ethics Statement for all current employees
• TRN-03 — AI Governance: For all AI System Owners and the AI Steering Committee
• TRN-04 — Technical Practitioner Training: For staff involved in AI model development, validation or operation
• TRN-05 — HR AI Training: Covers HR AI Use Policy, bias assessment obligations and GDPR Article 22 human review rights
• TRN-06 — Procurement Governance: Trains the procurement and legal teams on the AI Procurement Assessment Checklist (AIMS-D3-PAC)
• TRN-07 — Internal Auditor Training: Prepares designated auditors to conduct internal AIMS audits using AIMS-D4-AUD

The AIMS-D5-TRP document includes a Training Needs Matrix, full module specifications, delivery records, and a signed attendance register — all of which are required as objective evidence at your Stage 2 certification audit.

ISO/IEC 42001:2023 is the world's first international standard for Artificial Intelligence Management Systems (AIMS). Published in December 2023 by the International Organization for Standardization (ISO), it provides a structured, certifiable framework for organisations to develop, deploy and govern AI responsibly.

The standard is structured across Clauses 4–10 (normative requirements) and four Annexes:

• Annex A: 38 AI-specific controls across 9 groups (A.2 Policies, A.3 Internal Organisation, A.4 Resources, A.5 AI System Impact Assessment, A.6 AI Lifecycle, A.7 Data, A.8 Third-Party/Supplier AI, A.9 AI Incidents, A.10 Documentation)
• Annex B: Sector-specific implementation guidance — addressed in GbetruAIMS Pro Module 4
• Annex C: AI risk considerations — addressed in GbetruAIMS Pro Module 2
• Annex D: AI in the Organisation (operational guidance) — addressed in GbetruAIMS Pro Module 5

ISO/IEC 42001 follows the same Annex SL (High-Level Structure) as ISO 9001, ISO 14001, ISO 45001 and ISO 27001 — enabling seamless integration with existing management systems, which is the basis for GbetruAIMS Pro's Modules A–E.

ISO/IEC 42001 certification is conducted by an accredited third-party Certification Body (CB) — such as a body accredited by UKAS (UK) or another National Accreditation Body (NAB). The process follows two stages:

• Stage 1 — Documentation Review: The CB reviews your AIMS documentation to confirm it meets all clause requirements. GbetruAIMS Pro's Stage 1 Documentation Checklist (AIMS-M6-S1C) maps every required document across Modules 1–5 to the relevant clause, so nothing is missing.
• Stage 2 — On-Site Evidence Audit: The CB verifies your AIMS is operational — not just documented. The Stage 2 Evidence Checklist (AIMS-M6-S2C) sets out the objective evidence required for every clause: completed registers, signed training records, populated risk registers, meeting minutes, and corrective action logs.

Module 6 also includes a Certification Body Selection Guide (AIMS-M6-CBS) with a structured scoring matrix, red-flag guide, and enquiry letter template to help you select the right CB for your sector.

Many organisations also use GbetruAIMS Pro to build a conformant AIMS without seeking formal third-party certification — which is entirely valid where procurement contracts or regulatory requirements do not yet mandate it.

ISO/IEC 42001 is a voluntary management system standard; the EU AI Act is binding regulation. They are complementary: implementing ISO/IEC 42001 directly supports EU AI Act compliance, particularly for high-risk AI systems requiring risk management documentation, data governance, human oversight and transparency records.

GbetruAIMS Pro directly addresses key regulatory requirements:

• EU AI Act Annex III (High-Risk AI): The Internal AI Use Register (AIMS-D1-AIR) includes EU AI Act classification guidance for every registered AI system. HR AI systems are explicitly classified as High Risk under EU AI Act Annex III and are governed by the HR AI Use Policy (AIMS-D2-HRP).
• UK GDPR Article 22: The HR AI Use Policy (AIMS-D2-HRP) addresses the individual's right to human review of automated AI decisions — a direct GDPR compliance requirement.
• ISO 27001 / UK Cyber Essentials: Module B (AI-InfoSec Pack) integrates ISO 42001 AI governance with ISO 27001 information security controls.

Timescales depend on your organisation's size, existing management system maturity, and the scope of your AIMS. GbetruAIMS Pro's own module implementation guidance provides these reference timescales:

• Module 1 (Foundation Pack) and Module 2 (Planning & Risk): 3–6 weeks for most organisations — six governance documents and six risk documents are completed in sequence using the 11-step implementation guide in Module 1
• Module 3 (38 Annex A Controls): 4–8 weeks for SMEs; 8–16 weeks for larger organisations — completing 11 control documents across 9 control groups
• Module 4 (Sector Guides) and Module 5 (Annex D Operations): Modules 4–5 run in parallel in weeks 2–6; Module 5 alone follows a 5-step sequence over approximately 6 weeks, beginning with populating the AI Use Register
• Module 6 (Audit Readiness): Internal audit should be completed 4–6 weeks before Stage 2 certification audit

For the full Integrated Management System (Tier 3), the toolkit includes a dedicated 18-Month Certification Roadmap (IMS-E-IRM-006) across six phases: Foundation/Gap Analysis (Month 0–1), IMS Core (1–4), Quality+Safety systems (4–8), Environmental+InfoSec (7–11), AI Management (10–14), Pre-Certification (13–15), and Certification (14–18). The certification sequence delivers ISO 9001 + ISO 45001 at Month 12, ISO 14001 + ISO 27001 at Month 15, and ISO 42001 at Month 18.

No. GbetruAIMS Pro is designed for AI Management Representatives, quality managers, project directors, engineers and senior executives — not data scientists or AI developers. The toolkit assumes no AI programming knowledge.

Each module is assigned to named role owners drawn from standard organisational structures:

• Module 1 & 3 documents: AI Management Representative, Top Management, HR Director
• Module 2 (Risk): AI Management Representative, Legal Counsel, AI System Owners
• Module 5 (Operations): AI Management Representative, HR Director, DPO (Data Protection Officer), Procurement, Internal Auditors
• Module 6 (Audit): Internal Auditors, AI Steering Committee, Top Management

What the toolkit does assume is familiarity with management system thinking, organisational governance, and — for sector-specific modules — infrastructure, transportation or professional services delivery contexts.

Yes — and integration with existing management systems is a core design principle of GbetruAIMS Pro Plan 2. All five ISO standards in the IMS Bundle share the same Annex SL High-Level Structure, enabling one integrated audit programme, one document control system and one management review cycle to serve all standards simultaneously.

Plan 2 provides five dedicated integration modules (available from Tier 2 and Tier 3):

• Module A — ISO 42001 + ISO 9001 Quality-AI Integration Pack (4 artifacts, Tier 2+): Combined Quality-AI Policy (IMS-A-POL-001), Integrated Process Map (IMS-A-PROC-002), AI System Validation procedures (IMS-A-VAL-003), and Customer AI Disclosure & Consent framework (IMS-A-DISC-004)
• Module B — AI-InfoSec Pack: ISO 42001 + ISO 27001 (4 artifacts, Tier 3): Integrated AI and information security controls, privacy impact assessment, and AI-specific incident response
• Module C — Safe AI Pack: ISO 42001 + ISO 45001 (6 artifacts, Tier 3): Safety risk assessment for AI in infrastructure and transportation, human-machine interface governance, working at height and confined space AI considerations
• Module D — Green AI Pack: ISO 42001 + ISO 14001 (3 artifacts, Tier 3): Environmental impact assessment for AI systems, sustainable AI operations plan, and model lifecycle optimisation for carbon reduction
• Module E — Total IMS Bundle: All 5 Standards (6 artifacts, Tier 3): IMS Manual (IMS-E-MAN-001), Unified Risk Register (IMS-E-URR-002), Integrated Audit Programme (IMS-E-IAP-003), Management Review Pack (IMS-E-MRP-004), Integrated KPI Dashboard (IMS-E-KPI-005), and 18-Month Certification Roadmap (IMS-E-IRM-006)

GbetruAIMS Pro includes dedicated sector implementation guidance (in Module 4, Annex B) for the following sectors:

• Construction & Infrastructure (Module 4 — B02): Site AI systems, AI-assisted design, automated plant and equipment, BIM integration
• Transportation (Module 4 — B03): Transport network AI, autonomous and assisted vehicle systems, traffic management, rail operations
• Small & Medium Business — SME (Module 4 — B04): Quick-implementation guide for organisations with under 50 staff — proportionate AIMS with reduced documentation burden
• Large Corporate Governance (Module 4 — B05): Adaptation guide for organisations with 500+ staff — multi-site AIMS, delegated AI governance, board-level accountability

Module 2's Planning & Risk Pack includes additional sector customisation notes for Healthcare, Financial Services, Government/Public Sector, and Technology/SaaS organisations.

Module C (Safe AI Pack) specifically addresses AI deployment in infrastructure and transportation safety-critical environments, integrating ISO 45001 occupational health and safety requirements with AI system risk assessment.

ISO/IEC 42001:2023 is explicitly designed to be scalable to any organisation size — and GbetruAIMS Pro reflects this directly. The toolkit includes a dedicated Small Business Quick-Implementation Guide (AIMS-M4-B04) designed for organisations with under 50 staff, which:

• Identifies the minimum viable set of AIMS documents for a proportionate, auditor-ready system
• Adapts the 38 Annex A controls to the governance reality of a small business — where one person may hold multiple AIMS roles simultaneously
• Provides worked examples drawn from SME AI deployment contexts rather than enterprise case studies
• Maps a faster implementation sequence appropriate for organisations without a dedicated quality or compliance function

At the other end of the scale, the Large Corporate Governance Guide (AIMS-M4-B05) addresses multi-site, multi-division AIMS implementation for organisations with 500 or more staff.

GbetruAIMS Pro is available in three tiers — each is a complete, self-contained product, with higher tiers building on lower ones:

• Tier 1 — AIMS Essentials Foundation (49 artifacts, Modules 1–6): The complete standalone ISO/IEC 42001 implementation toolkit. Everything needed to build, document and certify a conformant AIMS for a single organisation. Includes Internal Use Licence (perpetual, non-transferable — for use within your own organisation only).
• Tier 2 — AIMS Professional (53 artifacts, Modules 1–6 + Module A): Everything in Tier 1, plus the ISO 42001 + ISO 9001 Quality-AI Integration Pack (Module A, 4 additional artifacts). Includes Professional Licence — adds the right to use the integrated Quality-AI documentation alongside your existing QMS.
• Tier 3 — AIMS + IMS Bundle (74 artifacts, all 11 modules): Everything in Tier 2, plus Modules B (ISO 27001), C (ISO 45001), D (ISO 14001) and E (Total IMS Bundle with 18-Month Certification Roadmap). Includes White Label Rebrand Licence — permits client delivery and rebranding of all 74 documents for professional services delivery.

The White Label Rebrand Licence is exclusive to Tier 3 (AIMS + IMS Bundle) and is defined in the End User Licence Agreement (Gbetruaimspro-LIC-001). It permits:

• Client delivery: You may adapt and deliver all 74 toolkit artifacts to external clients as part of professional services engagements
• Full rebranding: You may replace the GbetruAIMS Pro branding on all 74 documents with your own firm's or your client's branding
• Document customisation: All templates, policies, registers and checklists may be adapted for each client's specific sector, organisation size and scope

The licence requires that the attribution line "Developed using the GbetruAIMS Pro Toolkit methodology" appears in the footer or back page of delivered documents — unless a Full Attribution Waiver has been separately agreed and granted.

The licence is perpetual, non-sub-licensable and non-resalable — you cannot resell the toolkit itself or transfer the licence to another party. The licence is governed by the laws of England and Wales.

The 18-Month Certification Roadmap (IMS-E-IRM-006) is a Tier 3 artifact included in Module E (Total IMS Bundle). It provides a phased programme to achieve all five ISO certifications simultaneously — ISO 9001, ISO 14001, ISO 27001, ISO 45001 and ISO 42001 — through a single, integrated audit cycle.

The programme runs across six phases:

• Phase 0 (Months 0–1) — Foundation & Gap Analysis: Baseline assessment against all five standards; scope definition; IMS governance structure established
• Phase 1 (Months 1–4) — IMS Core: Integrated Management System Manual, Unified Risk Register, and integrated document control system deployed (Modules 1–2 and Module E core artifacts)
• Phase 2 (Months 4–8) — Quality & Safety: ISO 9001 Quality Management System and ISO 45001 Occupational Health & Safety system implemented (Module A and Module C)
• Phase 3 (Months 7–11) — Environmental & InfoSec: ISO 14001 Environmental Management and ISO 27001 Information Security systems implemented (Module D and Module B)
• Phase 4 (Months 10–14) — AI Management: Full ISO 42001 AIMS deployed across Modules 1–6 and integrated with the existing IMS
• Phase 5 (Months 13–15) — Pre-Certification: Internal audit programme completed; all corrective actions closed; Stage 1 documentation review submitted to Certification Body
• Phase 6 (Months 14–18) — Certification: Stage 2 on-site audits conducted. Certification sequence: ISO 9001 + ISO 45001 at Month 12; ISO 14001 + ISO 27001 at Month 15; ISO 42001 at Month 18