Skip to content

Reference & glossary

TermMeaning in the assessment
AIMSAI management system
AIMS scopeApproved organisational boundary to which the conclusion applies
Atomic checkAssessable part of a compound clause requirement
ConformityFulfilment of a requirement within the stated scope
Assurance depthStrength of verification supporting the assessor conclusion
SoAStatement of Applicability for Annex A reference controls
NonconformityNon-fulfilment of a requirement
CorrectionAction addressing a detected problem
Corrective actionAction addressing cause to prevent recurrence
Evidence cutoffLatest date covered by the conclusion
CertificationIndependent decision by an appropriate certification body; not issued by Gamut

The organisation must determine necessary controls through the standard’s risk-treatment process and document Annex A applicability in the SoA. An exclusion needs a defensible basis.

Gamut represents 173 atomic checks across clauses 4–10 and 38 individual Annex A controls. Atomic separation prevents partial fulfilment of a compound requirement from being reported as full support.

Is “Conformity supported” the same as certification?

Section titled “Is “Conformity supported” the same as certification?”

No. It is an assessor result for one atomic check. Certification is a separate independent process.

Can a requirement be supported with Unverified assurance?

Section titled “Can a requirement be supported with Unverified assurance?”

It can be recorded, but the claim lacks evaluated objective evidence and should not support a strong readiness conclusion.

No. It only reduces the context sent for AI assistance.

The visible status shows the failure. Retry and confirm a successful save before leaving the page or running scope-dependent analysis.

Gamut supports an ISO/IEC 42001:2023 conformity-readiness assessment. It does not reproduce the standard or issue certification.