Executive self-assessment

AI Governance Readiness Assessment

Measure whether AI adoption is governed with enough visibility, ownership, control, and evidence to support safe growth and external assurance.

Start assessment All tools
Result logic

What this tool evaluates

Evaluates AI inventory, ownership, risk classification, data, vendors, human oversight, testing, monitoring, and evidence.

Inventory & ownership 22%
Risk classification 20%
Data & privacy 20%
AI security 23%
Oversight & evidence 15%
0 / 10
0%
01 Is there a current inventory of sanctioned and material shadow AI use cases?
02 Does each material AI use case have an accountable business owner and technical owner?
03 Are AI use cases risk-tiered using factors such as impact, autonomy, data, customer exposure, and criticality?
04 Do higher-risk AI uses require documented approval, evaluation, and exception handling?
05 Are employees and applications prevented or clearly instructed from sending restricted data to unapproved AI tools?
06 Are AI vendors reviewed for training/data-use terms, retention, subprocessors, security, and location?
07 Are AI-enabled applications tested for prompt injection, data leakage, authorization failures, unsafe tool use, and abuse?
08 Are identities, secrets, connectors, tools, retrieval sources, and model permissions governed using least privilege?
09 Are model/application evaluations, human oversight requirements, incidents, and material changes documented?
10 Does leadership receive periodic AI risk, usage, vendor, exception, and incident reporting?