Self-assessed · sample · three ISO lenses
Initech: 27001, 27701, and 42001 from one AICM run
One GRA diagnostic. Three CSA-mapped lenses: information security (27001), privacy (27701), and AI management (42001). The delta is what each standard asks that the others do not.
One AICM function diagnostic, three ISO lenses from CSA mappings. Interpretive readiness analysis, not certification equivalence. ISO/IEC 27701 coverage in the CSA AICM sheet is sparse by design of the published mapping.
What the delta means
Initech: an ISMS-only climb misses 1 AI-only control on this GRA slice. Stack 27001 → 27701 (sparse) → 42001.
- ISO/IEC 27001 (ISMS): 16 priority absent · 24 of 26 in this slice map with No/Partial gap · matrix 186 AICM controls carry a 27001 grade.
- ISO/IEC 27701 (privacy): CSA grades only 2 AICM controls against 27701 in the published sheet. On this GRA slice, 0 map. Do not read silence as “privacy done.”
- ISO/IEC 42001 (AIMS): 17 priority absent · 2 controls on this slice are AI-only (42001 maps; 27001 does not) · absent AI-only: GRC-15.
- Shared win: 16 absent controls map to both 27001 and 42001 (GRC-03, AIS-04, AIS-07, TVM-03, TVM-08, A&A-02, A&A-05, A&A-06, STA-10, STA-13, BCR-01, BCR-02, BCR-06, IPY-01, IPY-03, IPY-04). One remediation pack advances gold-standard security and the AI management lens.
- Suggested sequence: (1) absent ISMS-mapped controls, (2) AI-only absents the ISMS will never clear, (3) privacy via a DSP/PIMS programme when 27701 mapping densifies or local law demands it.
Lens scoreboard
Priority = CSA maps the control and Initech attested absent. Matrix mapped = whole AICM sheet, not just this GRA slice.
ISMS gold standard
ISO/IEC 27001:2022
Priority absent 16 · slice mapped 24/26 · matrix 186
Open full report →AI management
ISO/IEC 42001:2023
Priority absent 17 · slice mapped 26/26 · matrix 247
Open full report →AI-only on slice
2
ISMS + AI shared
24
AI-only absents
1
Dual ISMS+AI absents
16
Side-by-side register
Gap columns are CSA mapping grades. Focus is the climb advice given Initech’s posture. Highlighted rows are absent or partial.
| AICM | Posture | 27001 | 27701 | 42001 | Class | Focus |
|---|---|---|---|---|---|---|
| GRC-01 | Impl. | Partial | n/a | No | ISMS + AI | Shared ISMS + AIMS mapping; one evidence pack can serve both lenses. |
| GRC-02 | Partial | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| GRC-03 | Absent | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| HRS-15 | Partial | n/a | n/a | No | AI-only | AI-only delta: 27001 will not clear this. Fund the AIMS / people-oversight climb. |
| GRC-15 | Absent | n/a | n/a | No | AI-only | AI-only delta: 27001 will not clear this. Fund the AIMS / people-oversight climb. |
| AIS-01 | Partial | Partial | n/a | Partial | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| AIS-04 | Absent | No | n/a | Partial | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| AIS-07 | Absent | No | n/a | Partial | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| TVM-01 | Partial | Partial | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| TVM-03 | Absent | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| TVM-08 | Absent | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| A&A-01 | Partial | Partial | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| A&A-02 | Absent | Partial | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| A&A-05 | Absent | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| A&A-06 | Absent | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| STA-01 | Partial | Partial | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| STA-08 | Partial | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| STA-10 | Absent | Partial | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| STA-13 | Absent | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| BCR-01 | Absent | Partial | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| BCR-02 | Absent | No | n/a | Partial | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| BCR-08 | Partial | No | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| BCR-06 | Absent | No | n/a | Partial | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| IPY-01 | Absent | Partial | n/a | No | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| IPY-03 | Absent | No | n/a | Partial | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |
| IPY-04 | Absent | No | n/a | Partial | ISMS + AI | Dual-mapped: closing practice clears both the ISMS gold standard and the AIMS lens. |