From ISO/IEC 42001 to the EU AI Act: Mapping the Residual Compliance Work

Abstract

Mapping residual EU AI Act compliance work after leading AI governance frameworks. Compares a multi-ISO stack (ISO/IEC 42001 and companions, including ISO 37301), IAPP AIGP and CIPP/E, and the NIST AI RMF (with generative-AI profile). By article-normalized weight, about 58% of the Act is public/institutional machinery; of the company-facing remainder, about 78% is product residual and about 22% is management-system / AI-governance work. On that MS/gov share, multi-ISO is the main structural approach for about 60% and reaches cumulative coverage of about 96%. Not legal advice.