Shadow AI Pulse Check
How Much Shadow AI
How Much Shadow AI
Is Running in Your Organisation?
Ten questions across exposure and governance response — get an instant shadow AI risk rating, identify your most urgent exposure, and know what to do about it first.
AI Exposure Level
Tool Visibility
Data Risk
Governance Response
Control Effectiveness
1
2
3
4
5
6
7
8
9
10
Section 1: Shadow AI Exposure
5 questions · How much unsanctioned AI use is occurring?
1
Known Unapproved Tool Use Risk indicator
Are you aware of AI tools being used in your organisation that have not been reviewed or approved through any formal process?
2
Tool Visibility
If you asked each department head today which AI tools their team uses, how confident are you that you would get an accurate and complete answer?
3
Sensitive Data Exposure
To the best of your knowledge, have employees entered confidential business information — such as client data, internal financials, or unreleased strategy — into a public AI tool (e.g. free-tier ChatGPT, Gemini, or similar)?
4
How AI Adoption Is Happening
Which best describes how AI tools are being adopted by your employees right now?
5
Client or Operational Impact
How frequently do AI outputs — from any tool, approved or not — directly influence client-facing work, financial decisions, or operational processes at your organisation?
Section 2: Governance Response
5 questions · How well is your organisation managing the exposure?
6
Written AI Policy
Does your organisation have a written policy that defines which AI tools are approved, what data employees may not input, and the consequences of non-compliance?
7
Approved Tools Register
Is there a named list of AI tools that are formally approved for use — with a defined process for evaluating and adding new tools?
8
Named Governance Owner
Is there a specific named person or team accountable for AI governance — including policy decisions, tool approvals, and responding to AI-related incidents?
9
Employee Communication
Have employees received active communication — beyond a one-time all-hands or memo — explaining what AI tools they can use, what data they cannot input, and who to contact if unsure?
10
Incident Response Readiness
If an employee reported that confidential data had been entered into an unapproved AI tool — right now, today — does your organisation have a defined response process to contain and assess the situation?
What Your Risk Rating Tells You
1
Your shadow AI risk level
Low, Medium, or High — with a score across exposure and governance response dimensions.
2
Most urgent exposure identified
The specific risk factor creating the most active exposure — with a concrete action to address it first.
3
A remediation path
If your score indicates High risk, you receive an honest assessment of your current exposure and the fastest path to resolution.
Shadow AI is addressable in weeks — not months. The consultation identifies exactly which controls to build first and in what order.
LATEST Posts
The Four Quadrants of AI Value: A Strategic Classification Framework for SMEs
Small and medium-sized enterprises face a specific AI adoption challenge: the volume of potential AI applications is overwhelming, yet resources …
The Complete Guide to AI Strategy for Mid-Market Leaders
An AI strategy is a documented plan that defines what artificial intelligence your organization will deploy, in what sequence, governed …
The Workplace AI Tool Landscape for Leaders
Leaders today are surrounded by AI requests. One department wants a writing assistant. Another wants AI inside email and meetings …
Start With the Task, Not the Tool: A Practical Way to Learn AI
Many people begin their AI learning journey by asking the same question: “Which AI tool should I use?” It is …
AI Readiness: What Organizations Should Fix Before Scaling AI
Many organizations want to scale AI quickly. They see competitors experimenting with generative AI. Employees are using ChatGPT or Copilot …
What Agentic AI Means After Basic AI Tools
Many people first experience AI through chat. They ask a question, receive an answer, refine the prompt, and use the …