ISO/IEC 38507:2022 AI Governance Templates
ISO/IEC 38507:2022 AI Governance Templates
Accountability for artificial intelligence stays with the board, including for the AI an organisation buys rather than builds.
Couldn't load pickup availability
Written and reviewed by practising specialists. Who writes this
Built and reviewed with our methodology. Read it
Read the guide: ISO/IEC 38507:2022: what boards should do to govern the use of AI
By document type
| Category | Files |
|---|---|
| Manuals | 4 |
| Procedures & SOPs | 14 |
| Forms & Records | 14 |
| Checklists & Audit Tools | 5 |
| Registers, Logs & Matrices | 2 |
| Guides & Work Instructions | 4 |
Key documents
| Reference | Document | Format |
|---|---|---|
| AGS-AIGF-MAN-01 | AI Governance Framework Manual | Word |
| AGS-AIGF-PR-02 | Evaluate–Direct–Monitor Governance Cycle | Word |
| AGS-AIGF-PR-04 | Governance Oversight of AI & Use-Case Authorization | Word |
| AGS-AIGF-PR-05 | Governance of AI Decision-Making | Word |
| AGS-AIGF-FR-03 | AI Use-Case Governance Assessment | Word |
| AGS-AIGF-FR-02 | AI Governance Risk & Oversight Register | Word |
- Need the complete document list? Request it — same day
- Want to check the quality first? Preview free samples
Overview
ISO/IEC 38507:2022 guides members of a governing body through the governance implications of using artificial intelligence. Its scope reaches organisations of every type and size that use AI, are considering it, or are affected by it, whether they build systems or acquire them, and it addresses directors, owners and executive leaders with the advisers who support them. Consistent with ISO/IEC 38500, it applies the evaluate, direct and monitor model so that AI adoption aligns with organisational objectives, obligations and stakeholder expectations.
Its substance is the questions a board must be able to answer: where AI-related risk originates, how the data used to train and operate systems was obtained and authorised, what transparency and explainability are owed to interested parties, and how the ethical, legal and societal implications of automated and algorithmic decision-making are weighed. The standard is explicit that operational responsibility may be delegated while accountability for acceptable use may not. As guidance rather than a certifiable specification, it complements ISO/IEC 42001 and draws on ISO/IEC 22989 for terminology and ISO/IEC 23894 for AI risk.
What this system covers
- AI use-case authorisation: where AI may be deployed, on what conditions, approved by whom
- Governance of AI decision-making: limits on automated decisions and how they are reviewed
- Governance of data use for AI: provenance, permitted purposes and the record of authorisation
- Transparency and explainability: what is disclosed about AI use, to whom and when
- AI risk governance: appetite, sources, controls and escalation when an incident occurs
- Accountability and delegation: duties split between board, executives and delivery teams
- Compliance obligations, culture and human behaviour: legal, ethical and societal expectations
Who it's for
Suited to directors, risk committee members, general counsel and heads of technology at the moment AI reaches the corporate risk register or a regulator's questions. They finish with a governance framework, an authorised inventory of AI use cases and a documented trail of the decisions taken about each.
Everything you get
Every toolkit gives you a full set of working documents for your standard, ready to edit and use.
Native Microsoft files. Add your logo and adapt every document to how you work.
Your full toolkit arrives as a ZIP the moment payment clears.
Any of your staff, at any of your own sites. No per-seat fees.
Sector specialists author each toolkit. A principal reviewer with more than twenty years reviews it.
One payment, perpetual licence for your organisation. No subscriptions, no renewals.
If a document is wrong, missing or not as described, tell us within 14 days. We fix it or refund you.
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes, for 12 months. Fixes and revisions to this toolkit are free for 12 months from your order. Email us with your order number to get them.
What is your refund policy?
If a document is wrong, missing or not as described, tell us within 14 days of your order. We fix it or refund you. If you have not downloaded yet, we can cancel the order and refund you in full. We don't refund a change of mind after download. See the Refund policy.
Cannot find your standard?
Tell us which scheme you work to. We will point you to the right toolkit.
More in Information Security, Risk & Business Continuity
See all 55
ISMS - ISO/IEC 27001:2022
Information Security, Risk & Business Continuity39 documents $790USD
ISO 22301-2019-Business Continuity Management System
Information Security, Risk & Business Continuity48 documents $790USD
ISO IEC 42001-2023 -AI Management System
Information Security, Risk & Business Continuity43 documents $790USD