GoToCertify AcademyCertificationsAGILEPM®AgilePM® Foundation — 2-day course (APMG)AgilePM® Practitioner — 2-day course (APMG)Compare AgilePM® certificationsDESIGN THINKINGDTMethod® Foundation — 2-day course (APMG)Compare Design Thinking certificationsDEVOPSDevOps FoundationDevOps LeaderSRE FoundationSRE PractitionerDevSecOps FoundationDevSecOps PractitionerAIOps FoundationObservability FoundationContinuous Testing FoundationVSM FoundationCompare DevOps certificationsISO 31000ISO 31000 Foundation — Exam Bundle (PECB)Risk Manager — Exam Bundle (PECB)Compare ISO 31000 certificationsISO/IEC 20000ISO/IEC 20000 Foundation — 2-day course (APMG)ISO/IEC 20000 Auditor — 2-day course (APMG)ISO/IEC 20000 Practitioner — 2-day course (APMG)Compare ISO/IEC 20000 certificationsISO/IEC 27001ISO/IEC 27001 Foundation — 2-day course (APMG)ISO/IEC 27001 Auditor — 2-day course (APMG)ISO/IEC 27001 Practitioner — 2-day course (APMG)Lead Implementer — Exam Bundle (PECB)Lead Auditor — Exam Bundle (PECB)Compare ISO/IEC 27001 certificationsISO/IEC 27005ISO/IEC 27005 Foundation — Exam Bundle (PECB)Risk Manager — Exam Bundle (PECB)Lead Risk Manager — Exam Bundle (PECB)Compare ISO/IEC 27005 certificationsISO/IEC 42001ISO/IEC 42001 Foundation — Exam Bundle (PECB)Lead Implementer — Exam Bundle (PECB)Lead Auditor — Exam Bundle (PECB)Compare ISO/IEC 42001 certificationsITIL® v5ITIL Foundation (Version 5)ITIL Foundation Bridge (Version 5)ITIL AI Governance (Version 5)ITIL Product (Version 5)ITIL Service (Version 5)ITIL Experience (Version 5)ITIL Strategy (Version 5)ITIL Transformation (Version 5)ITIL Managing Professional Transition (Version 5)Compare ITIL® v5 packagesLEAN SIX SIGMAYellow Belt (IASSC)Green Belt (IASSC)Black Belt (IASSC)Compare Lean Six Sigma certificationsM_o_R® 4M_o_R® 4 PractitionerMSP® 5MSP® 5 FoundationMSP® 5 PractitionerCompare MSP® 5 packagesPM²PM² Foundation — 2-day course (APMG)Compare PM² certificationsPRINCE2® 7PRINCE2® 7 FoundationPRINCE2® 7 PractitionerCompare PRINCE2® 7 packagesSCRUMScrum Essentials — 1-day course (APMG)Scrum Product Owner — 2-day course (APMG)Scrum Master — 2-day course (APMG)Compare Scrum certificationsTOGAFExam Simulator for TOGAF® EA FoundationExam Simulator for TOGAF® EA PractitionerTOGAF® EA Foundation — 2-day courseTOGAF® EA Practitioner — 2-day courseAll certificationsExam GuidesAGILEPM®Foundation (APMG)Practitioner (APMG)DESIGN THINKINGDTMethod Foundation (APMG)DEVOPSThe DevOps Foundation exam formatThe DevOps Leader exam formatThe SRE Foundation exam formatThe SRE Practitioner exam formatThe DevSecOps Foundation exam formatThe DevSecOps Practitioner exam formatThe AIOps Foundation exam formatThe Observability Foundation exam formatThe Continuous Testing Foundation exam formatThe VSM Foundation exam formatISO 31000Foundation (PECB)Risk Manager (PECB)ISO/IEC 20000Foundation (APMG)Auditor (APMG)Practitioner (APMG)ISO/IEC 27001Foundation (APMG)Auditor (APMG)Practitioner (APMG)Lead Auditor (PECB)Lead Implementer (PECB)ISO/IEC 27005Foundation (PECB)Risk Manager (PECB)Lead Risk Manager (PECB)ISO/IEC 42001Foundation (PECB)Lead Auditor (PECB)Lead Implementer (PECB)ITIL® v5The ITIL® v5 Foundation exam formatThe ITIL® v5 Foundation Bridge exam formatThe ITIL® v5 Service exam formatThe ITIL® v5 Product exam formatThe ITIL® v5 Experience exam formatThe ITIL® v5 Strategy exam formatThe ITIL® v5 Transformation exam formatThe ITIL® v5 AI Governance exam formatThe ITIL® v5 Managing Professional Transition exam formatITIL® 4 or ITIL® 5?The ITIL® v5 certification pathWhat ITIL® v5 certification costsLEAN SIX SIGMAYellow Belt (IASSC)Green Belt (IASSC)Black Belt (IASSC)M_o_R® 4The M_o_R® 4 Practitioner exam formatMSP® 5The MSP® 5 Foundation exam formatThe MSP® 5 Practitioner exam formatPM²Foundation (APMG)PRINCE2The PRINCE2 7 Foundation exam formatThe PRINCE2 7 Practitioner exam formatPRINCE2 Agile FoundationPRINCE2 Agile PractitionerWhat PRINCE2® 7 certification costsSCRUMEssentials (APMG)Product Owner (APMG)Scrum Master (APMG)TOGAFThe OGEA-101 exam formatThe OGEA-102 exam formatFoundation or Practitioner?The TOGAF 10 certification pathWhat certification costs Log inCreate account
← All news
News · EU AI Act

Free EU AI Act self-assessment mapped to ISO/IEC 42001

A free, browser-only tool to measure how ready your organisation is for the EU AI Act, as amended by the Digital Omnibus, with every requirement linked to the controls of ISO/IEC 42001:2023.

By Claudio Restaino ·

58Requirements
12Areas
ISO/IEC 42001Control map

What it covers

The assessment covers the obligations that apply today (prohibited practices, AI literacy, transparency and marking of synthetic content, GPAI models) and those that apply from 2 December 2027 (Annex III high-risk systems) and 2 August 2028 (Annex I). It also covers the GDPR interface (DPIA, automated decisions) and the governance, inventory, supplier and incident practices that ISO/IEC 42001 expects from an AI management system.

Regulatory status: Regulatory snapshot of 31 October 2026, including Regulation (EU) 2026/1744 (Digital Omnibus on AI): new prohibitions from 2 December 2026, Article 50 marking for legacy systems by 2 December 2026, high-risk obligations postponed to 2 December 2027 and 2 August 2028.

How it works

  • Profile: a few facts about the organisation and yes/no questions that exclude the requirements that do not apply.
  • Assessment: each requirement is scored on a maturity scale from 0 (not started) to 4 (fully compliant), with space for evidence, owner and target date.
  • Dashboard: compliance percentages by area, by legal source and by control group of the reference standard, plus P1/P2 priority gaps.
  • PDF report: summary, charts, prioritised action plan with guidance for every gap, control coverage map, regulatory dates and a five-phase roadmap.

Nothing is sent to our servers: the assessment runs entirely in the browser, and you can download a save file to resume later or share with colleagues. No account is needed.

Who it is for

Compliance, legal, IT security and risk functions, DPOs, CISOs, consultants and auditors who need a quick, structured picture of where an organisation stands before planning a compliance programme or a certification.

The assessment is part of the GoToCertify Compliance Self-Assessment Hub, which also offers free assessments for the EU AI Act, the GDPR, NIS2 and DORA.

Questions people ask

Does it cover national AI laws?

No. This edition is EU-wide and deliberately leaves national implementing laws out. A separate Italian edition covers Law 132/2025 and its implementing decrees.

Can the output be used for an ISO/IEC 42001 project?

Yes. The control coverage map shows, for every Annex A control and for clauses 4-10, which requirements are linked and how mature they are: a practical starting point for the Statement of Applicability.

Is it legal advice?

No. It is a self-assessment for information purposes. References point to the official texts on EUR-Lex and to Commission guidance; verify them before taking compliance decisions.

Measure your compliance in about an hour

Free, no registration, PDF report included.

Start the EU AI Act self-assessment
PeopleCert Accredited Training Organization and Approved Examination Organization

BITIL.COM is an ATO (Accredited Training Organization) and an AEO (Approved Examination Organization) of PeopleCert. PRINCE2® and PRINCE2 Agile® are registered trade marks of PeopleCert.

PrivacyTermsAboutVerify a GoToCertify certificate