Toolkit bundle

AI Risk & Lifecycle Control

Connect one risk method to lifecycle controls, inventory, AISIA workflow, and evidence structure for AI systems.

Best for: Operational control of AI lifecycle risk.

This bundle combines the unified risk method in Toolkit 5 with the lifecycle operating controls in Toolkit 6, so each AI system can be identified, assessed, risk-treated, evidenced, monitored, and escalated through one operating model.

£1,295 inc. VAT bundle price £1,598 inc. VAT individually. Save £303 (19%). 30 artefacts included

Toolkit 5 Toolkit 6

Available now

Instant digital download

30 artefacts. No subscription. One-off purchase.

£1,295inc. VAT

Get the bundle - £1,295 inc. VAT Compare bundles

🔒 Secure checkout via Lemon Squeezy ⚡ Instant delivery to your email 📄 7-day refund policy 👤 Your governance data stays with you

Included in this bundle

Toolkit 5 - Unified AI & Security Risk System
Toolkit 6 - AI Lifecycle Control System

30 artefacts included across Toolkit 5 and Toolkit 6.

Includes all current files from Toolkit 5 and Toolkit 6, delivered as a one-off digital download.

Outputs may be shared with auditors, customers, regulators, and advisers for assurance.

By the end of implementation you will have

A live AI inventory linked to ownership, lifecycle stage, and assessment status.
A unified AI and security risk method for scoring, treatment, evidence, and reporting.
A repeatable route from AISIA triage into risk treatment, model documentation, monitoring, and retirement.
Committee-ready oversight records that connect AI lifecycle control with risk position and evidence status.

Designed for

Organisations that need operational control of AI systems from design to retirement.
CISO, GRC, InfoSec, AI, data, and risk leaders managing AI lifecycle accountability.
Teams that want AI inventory, AISIA, model cards, and risk treatment to operate as one workflow.
Internal audit and assurance teams that need traceable evidence across AI system ownership, change, monitoring, and retirement.

Toolkit contribution comparison

Use this matrix to compare what each included toolkit contributes, what it costs, and what manual work it replaces.

Capability	Toolkit 5 £499 inc. VAT	Toolkit 6 £1,099 inc. VAT
AI inventory and ownership	Supporting roleCaptures inventory and ownership data where it informs risk scoring and treatment.	Primary roleProvides the operational AI inventory, lifecycle status tracker, supplier mapping, and data lineage structure.
AISIA impact assessment	Supporting roleReceives AISIA outputs as risk inputs, treatment actions, and evidence references.	Primary roleRuns AISIA triage and full assessment workflow for new or materially changed AI systems.
Unified risk register	Primary roleProvides the unified AI and security risk register, scoring method, treatment plan, heatmap, and audit exports.	Supporting roleFeeds lifecycle classification, threshold outcomes, and control evidence into the risk method.
Lifecycle evidence	Supporting roleLinks risk entries and treatment actions to evidence IDs, owners, dates, and control status.	Primary roleProduces lifecycle artefacts from design to retirement, including model cards and monitoring records.
Committee reporting	Primary roleProvides risk summary, treatment status, heatmap, and audit pack views.	Primary roleProvides inventory, AISIA outcome, lifecycle stage, and model documentation views for approvals.
What it replaces	Replaces separate ISMS risk logs, AI risk spreadsheets, heatmaps, and treatment trackers.	Replaces uncontrolled AI inventories, inconsistent impact assessments, scattered model documentation, and informal lifecycle sign-offs.

Toolkit 5 - Unified AI & Security Risk System

£499 inc. VAT

AI inventory and ownership: Captures inventory data where it affects risk.
AISIA impact assessment: Receives AISIA outputs as risk inputs.
Unified risk register: Provides scoring, treatment, heatmap, and audit exports.
Lifecycle evidence: Links risks to evidence IDs and treatments.
Committee reporting: Provides risk summary and treatment status.

What it replaces: Replaces separate ISMS risk logs, AI risk spreadsheets, heatmaps, and treatment trackers.

Toolkit 6 - AI Lifecycle Control System

£1,099 inc. VAT

AI inventory and ownership: Provides the operational AI inventory and lifecycle tracker.
AISIA impact assessment: Runs triage and full assessment workflow.
Unified risk register: Feeds lifecycle classification and evidence into risk treatment.
Lifecycle evidence: Produces model cards, monitoring records, and stage artefacts.
Committee reporting: Provides lifecycle, AISIA, and model documentation views.

What it replaces: Replaces uncontrolled AI inventories, inconsistent impact assessments, scattered model documentation, and informal lifecycle sign-offs.

What each included toolkit adds

Each included toolkit keeps its full standalone content and purpose. The bundle gives you a joined-up route through those artefacts.

Toolkit 5 - Unified AI & Security Risk System

21 artefacts

One risk register for information security and AI lifecycle risks. Replace fragmented ISMS and AI risk spreadsheets with a single governance-ready register, unified scoring method, and audit-traceable evidence hooks.

Key contribution

Unified Risk Register - master risk log with unified scoring, treatment tracking, heatmap, and audit-ready exports.
AI Inventory Workbook - AI system register with model metadata, supplier mapping, data lineage, and lifecycle dashboard.
AISIA Short and Long Forms - proportionate impact assessment workflow for each AI system.
Treatment and evidence hooks - links risks, owners, actions, decisions, controls, and evidence IDs.

View individual toolkit

Toolkit 6 - AI Lifecycle Control System

9 artefacts

Control AI from design to retirement with an ISO/IEC 42001-aligned inventory, AISIA workflow, lifecycle evidence structure, and model documentation that governance reviewers can navigate.

Key contribution

AI Inventory Workbook - operational register, lifecycle status tracker, supplier mapping, data lineage, dashboard, and version history.
AISIA Triage and Full Assessment - intake gate and deeper assessment for Elevated and High systems.
Model Card templates - short and long form documentation for system purpose, data, model behaviour, limits, monitoring, and approvals.
Lifecycle evidence templates - design, development, validation, deployment, monitoring, change, and retirement evidence.

View individual toolkit

Suggested implementation path

Use Toolkit 6 to identify AI systems, confirm ownership, assign lifecycle stage, and run AISIA triage.
Use Toolkit 5 to score material AI and security risks, assign treatment owners, and track evidence links.
Use Toolkit 6 lifecycle artefacts and model cards to produce the evidence needed for approvals, monitoring, change control, and retirement.
Use Toolkit 5 reporting outputs to brief the Technology & Risk Committee on risk position, treatment status, and assurance gaps.

Why choose this bundle

This bundle is for organisations that need more than a risk register. It connects AI system ownership, AISIA, lifecycle governance, risk scoring, treatment, and evidence so AI systems can be governed from design to retirement.

Procurement justification

This bundled purchase supports implementation of integrated AI risk-management and lifecycle governance controls.

The combined materials connect risk identification, scoring and treatment with AI inventory, approval, model documentation, monitoring, change control and retirement evidence so that AI systems can be managed throughout their operational lifecycle.

The materials can be implemented internally by AI governance, information security, risk, data, product, compliance and internal audit teams using our organisation's own governance and evidence systems.

This is a one-off digital bundle purchase. The supplier does not require access to our AI inventories, AI systems, prompts, models, datasets, customer data, source code, production environments, internal systems, risk registers or completed lifecycle evidence to fulfil this purchase.

The purchase is proportionate because it links the risk method to the lifecycle controls that keep AI oversight current, while providing a saving against buying the included toolkits separately.

Designed for internal approval and procurement workflows.

Frequently asked questions

Why combine risk and lifecycle control?

Risk treatment is more effective when it is linked to the AI system lifecycle. Toolkit 5 provides the risk method, and Toolkit 6 provides the controls for intake, approval, monitoring, change and retirement.

Is this a hosted AI inventory platform?

No. It is a self-contained digital toolkit, not a hosted SaaS platform or managed governance portal.

Does the supplier need access to our AI inventory?

No. The supplier does not require access to AI inventories, systems, datasets, prompts, models, source code, risk registers or completed lifecycle evidence.

What file formats are included?

The bundle is delivered as PDF, DOCX, XLSX, PPTX and TXT files, depending on toolkit.

Can this be used with our existing GRC or document systems?

Yes. The outputs can be adapted and stored in the organisation's own document management, risk, audit and evidence systems.

How should this be implemented?

Start by establishing the AI inventory and lifecycle status, then connect each system to impact assessment, risk treatment, model documentation and review evidence.

Complete indexed PDF remains standalone

Build Once. Comply Twice. is sold separately as a £17.99 inc. VAT complete indexed PDF desk reference. It supports the operating model, but it is not required to purchase or use these bundles.

View book View Complete System Bundle