ISO 42001 Clause 6.1 Explained: The AI Risk Assessment Every Law Firm Is Missing (Module 4)

Before any AI system touches client work at your law firm, ISO 42001 Clause 6.1 requires a structured, documented risk and impact assessment. In every baseline gap assessment we've conducted, zero firms have one. In this video, we walk through Module 4 of the UNUS London ISO 42001 Law Firm Series — the most analytically critical gap in the entire programme. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎯 WHAT YOU'LL LEARN IN THIS VIDEO ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✅ What ISO/IEC 42001:2023 Clause 6.1 actually requires — not the vague summary, the real obligation ✅ The 8-factor risk scoring methodology used to assess AI systems in legal practice ✅ A fully worked risk assessment for GPT-4o (AIMS-SYS-001) — including inherent scores, controls, and residual ratings ✅ How to use a 5×5 risk heat map to classify AI systems by tier (Low / Medium / High / Critical) ✅ Why two risks remain unmitigated at register issue — and how to record and manage them compliantly ✅ How G4 unlocks Gaps 5, 6, 7, and 8 downstream — without this register, those controls have no rationale ✅ How a completed Part A satisfies Pemberton Capital's Question 3 on AI risk processes ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📄 DOCUMENT COVERED IN THIS VIDEO ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ REG-AIMS-RISK-001 v1.0 — AI Risk & Impact Register Part A: 8-factor risk register with 5×5 scoring matrix Part B: Impact assessment form for new deployments Pre-populated worked assessments for AIMS-SYS-001 to 004 Risk acceptance record for High+ residual risks Quarterly review log Available to Governance Academy members → https://unuslondon.com/governance-aca... ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📌 THIS VIDEO IS PART OF A SERIES ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ISO 42001 Law Firm Series — building a complete AI Management System (AIMS) for legal practice, gap by gap, document by document. G1 → AI System Discovery & Register G2 → Governance Structure & AGL Appointment G3 → Policy Framework G4 → Risk & Impact Assessment (THIS VIDEO) ← YOU ARE HERE G5 → AI System Lifecycle Management G6 → Data Governance G7 → Client Disclosure G8 → Human Oversight (HITL) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔗 USEFUL LINKS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🌐 Website: https://unuslondon.com 🎓 Governance Academy: https://unuslondon.com/governance-aca... 📅 Book a Discovery Call: https://calendly.com/unuslondon/disco... 💼 LinkedIn:   / unuslondon   📧 [email protected] ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🆓FREE RESOURCES ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🌐Module 4 URL: https://unuslondon.com/modules/module... 📄AI Risk Assessment Template Download: https://unuslondon.com/modules/templa... #ISO42001 #AIGovernance #LawFirmCompliance #AIRiskAssessment #LegalTech #ComplianceArchitecture #UNUSLondon #AIMS #SRA #AIManagementSystem