Checklist for Clause 7.4 of ISO/IEC 42001 (AIMS): Communication

1. Introduction

Below is a certification-grade, auditor-ready tabular checklist for Clause 7.4 of ISO/IEC 42001 - Communication, developed directly from the PECB auditing slides provided and expanded into clear, testable, evidence-based audit criteria aligned with PECB / IAS-accredited audit practice.

This checklist ensures AIMS communications are planned, aligned, executed, monitored, and improved—not ad hoc.

2. ISO/IEC 42001 - Clause 7.4: Communication

Audit Checklist (Needs, Planning, Alignment, Execution & Feedback)

# Clause 7.4 Requirement Area Audit Objective Audit Questions (Checklist) Expected Evidence Conformance (Y/N/Partial) Findings / Gaps Risk Rating Improvement Actions
7.4-1 Determination of Communication Needs Confirm scope Has the organization identified internal and external communication needs relevant to the AIMS? Communication needs analysis     
7.4-2 Interested Parties Coverage Validate audiences Are all relevant interested parties identified for AIMS communications (internal & external)? Stakeholder map; comms matrix     
7.4-3 Communication Plan Existence Confirm planning Is there a documented communication plan for the AIMS? Approved comms plan     
7.4-4 What to Communicate Ensure relevance Does the plan specify key messages, information, and updates related to the AIMS? Message catalogue     
7.4-5 When to Communicate Ensure timeliness Does the plan define timing, frequency, and trigger points for communication? Schedules; trigger definitions     
7.4-6 With Whom to Communicate Confirm targeting Does the plan identify intended audiences for each communication? Audience mapping     
7.4-7 How to Communicate Validate channels Are channels, methods, and formats defined to ensure clarity and accessibility? Channel matrix; templates     
7.4-8 Alignment with AIMS Verify consistency Are communications aligned with AIMS objectives, policy, and requirements? Policy/objective mapping     
7.4-9 Strategic Alignment Support direction Do communications support organizational strategy and responsible AI principles? Strategy linkage     
7.4-10 Implementation of Plan Confirm execution Are communications delivered as planned? Distribution logs; records     
7.4-11 Monitoring of Delivery Ensure control Is communication delivery monitored to confirm reach and timeliness? Monitoring reports; metrics     
7.4-12 Accuracy & Consistency Prevent confusion Are communications accurate, consistent, and controlled? Reviews; approvals     
7.4-13 Incident & Escalation Comms Ensure readiness Are incident, breach, and escalation communications defined and tested? Incident comms SOPs     
7.4-14 External Disclosure Manage transparency Are external communications (where applicable) appropriate and approved? Disclosure approvals     
7.4-15 Feedback Mechanisms Enable improvement Is there a process to receive feedback on AIMS communications? Feedback channels; surveys     
7.4-16 Effectiveness Assessment Validate impact Is communication effectiveness assessed (understanding, reach, action)? Survey results; interviews     
7.4-17 Improvement Actions Close the loop Are improvements implemented based on feedback and assessments? Improvement logs     
7.4-18 Change-Driven Updates Ensure currency Are communications updated when AIMS changes occur (Clause 6.3)? Change comms records     
7.4-19 Record Retention Ensure evidence Are records of communications retained as documented information? DMS records     
7.4-20 Management Oversight Confirm governance Does management review communication effectiveness as part of AIMS oversight? Management review minutes     


3. Auditor's Conclusion - Clause 7.4

Assessment Area Conclusion
Overall Conformance Status ☐ Conform ☐ Minor NC ☐ Major NC
Effectiveness of AIMS Communication ☐ Effective ☐ Partially Effective ☐ Ineffective
Alignment with AIMS & Strategy ☐ Strong ☐ Partial ☐ Weak
Risk of Communication Failure ☐ Low ☐ Medium ☐ High

4. Common Auditor Findings (Clause 7.4)

Auditors frequently raise findings where:

  • Communication needs are not formally determined
  • Plans exist but are not implemented
  • Messages are misaligned with AIMS objectives
  • No evidence of monitoring or feedback
  • Communications aren't updated after changes

This checklist explicitly prevents those nonconformities.

5. ISOLTX Operational Alignment

Clause 7.4 is operationalised through:

  • DMS → Controlled communication plans & records
  • PERFORMANCE → Communication effectiveness KPIs
  • I²MAS → Incident & escalation communications
  • AUDIT → Communication plan and delivery testing

It ensures communication is a controlled governance process, not an afterthought.

6. Contact Us Today

Are you looking to grow into an Artificial Intelligence (AI) trusted company?

Contact Crest Advisory Africa today for expert guidance on implementing ISO 42001 frameworks tailored to your organization's needs.

Start your journey today. Visit crestadvisoryafrica.com or contact us at +27 (0) 764034307 or nico@crestadvisoryafrica.com.

Let's make 2026 the year of your professional breakthrough!