AI Governance Self-Assessment
Is Your AI Use
Is Your AI Use
Properly Governed?
Ten questions across six governance elements — know exactly where your AI governance gaps are, your governance tier, and what to fix first.
Policy & Tools
Risk Tiering
Human Oversight
Data Privacy
Shadow AI
Training & Auditability
1
2
3
4
5
6
7
8
9
10
Policy & Approved Tools
2 questions · up to 2 points
1
Written AI Use Policy
Does your organisation have a written AI use policy that covers approved tools, prohibited uses, and data handling rules — accessible to all employees?
2
Approved Tools Register
Is there a named list of approved AI tools and a defined process for requesting new ones?
Risk Tiering
1 question · up to 1 point
3
Risk Classification Practice
Do you classify AI use cases by risk level — low, medium, high — and apply different oversight requirements based on that classification?
Human Oversight
1 question · up to 1 point
4
Defined Human Review Step
For AI outputs that affect clients, financial decisions, compliance, or HR — is there a defined human review step before those outputs are acted on?
Data Privacy & Incident Response
2 questions · up to 2 points
5
Data Input Privacy Rules
Are there clear rules about what internal data employees may and may not input into AI tools — including client data, PII, and confidential business information?
6
Incident Escalation Path
If an AI system produced a wrong or harmful output, does your organisation have a defined escalation path — including who is responsible and how the situation is contained?
Shadow AI & Governance Ownership
2 questions · up to 2 points
7
Shadow AI Presence Inverted scoring
Are you aware of AI tools being used in your organisation that have not been reviewed or approved by anyone in a governance capacity?
8
Named Governance Owner
Is there a specific named person or team accountable for AI governance decisions — policy maintenance, tool approvals, and incident response?
Training & Auditability
2 questions · up to 2 points
9
Training-Gated Tool Access
Is AI tool access tied to minimum training completion — or can employees access approved AI tools without completing any training first?
10
Audit Trail & Reconstructability
If a regulator, auditor, or client asked how a specific AI-assisted decision was made — could your organisation reconstruct the process and evidence?
What Your Score Tells You
1
Governance tier
Governed, Partially Governed, or Ungoverned — with a score out of 10 across six elements.
2
Most urgent gap identified
The specific governance element creating the most active risk — with a concrete action to address it first.
3
Live risk signal
If your score indicates ungoverned AI use, you receive an honest assessment of the current exposure and the fastest path to resolution.
A minimum viable AI governance framework can be built in two to three weeks. The consultation identifies exactly what to build first.
LATEST Posts
The Four Quadrants of AI Value: A Strategic Classification Framework for SMEs
Small and medium-sized enterprises face a specific AI adoption challenge: the volume of potential AI applications is overwhelming, yet resources …
The Complete Guide to AI Strategy for Mid-Market Leaders
An AI strategy is a documented plan that defines what artificial intelligence your organization will deploy, in what sequence, governed …
The Workplace AI Tool Landscape for Leaders
Leaders today are surrounded by AI requests. One department wants a writing assistant. Another wants AI inside email and meetings …
Start With the Task, Not the Tool: A Practical Way to Learn AI
Many people begin their AI learning journey by asking the same question: “Which AI tool should I use?” It is …
AI Readiness: What Organizations Should Fix Before Scaling AI
Many organizations want to scale AI quickly. They see competitors experimenting with generative AI. Employees are using ChatGPT or Copilot …
What Agentic AI Means After Basic AI Tools
Many people first experience AI through chat. They ask a question, receive an answer, refine the prompt, and use the …