AiGovOps Foundation · Topic
How do I create an AI audit plan?
The 10-minute Gate Check helps create an audit plan for an AI agent. It asks yes-or-no questions, each tied to evidence, and ends with a Gate Card showing the verdict and exact gaps. For deeper vendor review, the Vendor RFI offers a scored knowledge check, self-audit, and verifiable receipt; the Library maps 100 verified harm cases to frameworks.
Key facts
- The Gate Check takes 10 minutes and its output is an audit plan.
- The Gate Check asks yes-or-no questions about an AI agent and names evidence to point at.
- The Gate Card contains a verdict and the exact gaps.
- The open-source Vendor RFI/RFP is also an audit-training tool with a scored knowledge check, self-audit, and verifiable receipt export.
- The Library has 100 verified AI-harm cases mapped to NIST AI RMF, EU AI Act, ISO/IEC 42001, and OWASP.
Audit tips from the blog
- Translate NIST AI RMF functions into executable, testable controls in a deployment pipeline.
- Treat ISO 42001 controls as pipeline checks that leave a receipt an auditor can read.
- Follow a 90-day sequence of classification, gap assessment, technical documentation, and evidence generation for the EU AI Act.
Related resources
- Run the ten-minute Gate Check
- Vendor RFI repository
- F-AI Friday Library cases
- Frameworks explorer
- Practice site
Related topics
Frequently asked questions
What does the Gate Check produce?
The Gate Check ends with a Gate Card showing the verdict and exact gaps, and its output is an audit plan.
How long does the Gate Check take?
The Gate Check takes 10 minutes.
What is the Vendor RFI?
It is an open-source vendor RFI/RFP and audit-training tool with a scored knowledge check, self-audit, and verifiable receipt export.
What does the Library contain?
The Library has 100 verified AI-harm cases mapped to NIST AI RMF, EU AI Act, ISO/IEC 42001, and OWASP.
Which articles offer audit tips?
The Foundation’s blog covers NIST AI RMF controls, ISO 42001 controls, and an EU AI Act 90-day roadmap.
Updated 2026-10-09 · Ken Johnston & Bob Rapp
Take the next step
Continue with one practical next step from the AiGovOps Foundation.
Get an audit plan with the Gate Check →