GAAI Audit & Verification™
GAAI AI Audit
Independent Examination of Applicable AI Practices.
A GAAI-related AI audit evaluates applicable organizational practices, controls and evidence against the relevant requirements and scope.
An audit having taken place does not mean an organization is verified. Audit produces findings and a report. Verification is a separate GAAI decision made on qualifying results, within the applicable scope.
Audit areas
What an Audit Examines
The same sequence applies whatever the organization or the scope, so results can be compared and defended.
- Audit Planning
- Scope Definition
- Risk Assessment
- Evidence Collection
- Control Assessment
- Testing
- Findings
- Corrective Actions
- Audit Reporting
- Reassessment
Audit process
Evidence, Tested and Reported
The audit must be performed according to applicable GAAI requirements, including independence and conflict-of-interest requirements.
PLANEstablish audit objectives, approach and resourcing.
DEFINE SCOPEAgree the systems, processes and requirements in scope.
COLLECT EVIDENCEGather sufficient, relevant and reliable evidence.
TESTTest whether controls operate as intended in practice.
EVALUATEEvaluate practice against the applicable requirements.
REPORTReport outcomes in a consistent, defensible format.
CORRECTAgree remediation and expectations for closure.
REASSESSRe-examine as remediation completes and AI use evolves.
Standard
GAAI-500
The audit standard these audits are performed under.
View standard
Next stage
Verification Process
What happens after the audit report.
See the process
Directory
Certified AI Auditors
Professionals holding applicable GAAI AI Auditor credentials.
Find an auditor
Governance
Audit Independence
Independence and conflict-of-interest requirements.
Read policies
Evidence That Stands Up to Examination
Consistent audit practice, independent judgement and findings that can be defended.