For Individuals
For Companies
Events
About
Contact
LOGIN

Skip to content

ISO 42001 Annex A Controls: Turning Each Control Into Evidence an Auditor Accepts

A.9 Responsible Use of AI Systems and Intended Purpose Controls

Quiz: A.9 Responsible Use of AI Systems and Intended Purpose Controls

A.10 Third Party and Customer Relationships and Supplier Controls

Quiz: A.10 Third Party and Customer Relationships and Supplier Controls

Choosing Controls and Recording Exclusions With Justification

Quiz: Choosing Controls and Recording Exclusions With Justification

Evidence Design: One Artefact, One Owner, One Review Date

Quiz: Evidence Design: One Artefact, One Owner, One Review Date

Testing Whether a Control Operates Rather Than Merely Exists

Quiz: Testing Whether a Control Operates Rather Than Merely Exists

Keeping the Statement of Applicability Current as Systems Change

Quiz: Keeping the Statement of Applicability Current as Systems Change

Final exam: ISO 42001 Annex A Controls: Turning Each Control Into Evidence an Auditor Accepts

2 of 2

Previous Lesson

Quiz: Choosing Controls and Recording Exclusions With Justification

ISO 42001 Annex A Controls: Turning Each Control Into Evidence an Auditor Accepts
Choosing Controls and Recording Exclusions With Justification
Quiz: Choosing Controls and Recording Exclusions With Justification

Time limit: 0

Quiz Summary

0 of 5 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 5 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

Not categorized 0%

Review
Answered
Correct
Incorrect

Question 1 of 5

1. Question

What does applicability mean in ISO 42001?

All controls must be implemented in every organisation
Correct Incorrect Correct answer

Controls are implemented based on what is appropriate to an organisation's context and risks
Correct Incorrect Correct answer

Applicability is determined by the auditor
Correct Incorrect Correct answer

No controls are mandatory
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 2 of 5

2. Question

What is required when you exclude an Annex A control?

No justification is needed if you exclude a control
Correct Incorrect Correct answer

You must provide specific justification based on your risks and context
Correct Incorrect Correct answer

Exclusion is not allowed in ISO 42001
Correct Incorrect Correct answer

You can exclude controls without documenting them
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 3 of 5

3. Question

What is a weak justification for excluding a control?

A justification that references specific business context
Correct Incorrect Correct answer

We do not think this control is needed
Correct Incorrect Correct answer

A detailed explanation of how the excluded control's risk is managed by other means
Correct Incorrect Correct answer

Weak justifications are not an issue
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 4 of 5

4. Question

When should you update your statement of applicability?

Never, it is created once and does not change
Correct Incorrect Correct answer

Regularly and whenever your AI systems change or new risks emerge
Correct Incorrect Correct answer

Only when auditors require it
Correct Incorrect Correct answer

Only after an incident occurs
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 5 of 5

5. Question

What happens if an auditor finds a control was incorrectly excluded?

Nothing happens if you documented the exclusion
Correct Incorrect Correct answer

This becomes an audit finding indicating the control should have been applied
Correct Incorrect Correct answer

Exclusions cannot be challenged by auditors
Correct Incorrect Correct answer

The auditor will approve the exclusion
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points

Login

Accessing this course requires a login. Please enter your credentials below!

Username or Email Address

Password

Remember Me

Continue with Facebook

Continue with Google

Lost Your Password?

Register

Don't have an account? Register one!

Register an Account

Ready to Lead the AI Revolution?

Join hundreds of executives transforming their careers with Tesseract Academy.

Explore Individual Learning

© 2026 Tesseract Academy. All Rights Reserved.