AI Governance Readiness Check for Organizations

This check runs in your browser and requires JavaScript. If JavaScript is not enabled, read about AI governance for organizations or contact us.

0 of 15 answered0%

01Does the organization know who uses AI, which tools are used, and for what tasks?

Include embedded AI features, external providers, and relevant teams. (Area: Use)

Yes Partly No

02Are permitted, approval-required, and prohibited AI uses defined?

For example drafting, transcription, data analysis, customer support, and decision support. (Area: Use)

Yes Partly No

03Are AI tools and accounts approved by the organization before use?

Include browser extensions, personal accounts, and AI embedded in existing software. (Area: Use)

Yes Partly No

04Are there clear rules about what information may be entered into AI tools?

Consider personal and sensitive data, trade secrets, and confidential information. (Area: Data)

Yes Partly No

05Have vendor terms been reviewed for retention, data use, and model training?

Review the service and configuration actually used by the organization. (Area: Data)

Yes Partly No

06Do staff know how to minimize or remove unnecessary information before using AI?

Data minimization and removing identifiers can help reduce unnecessary exposure. (Area: Data)

Yes Partly No

07Is risk-proportionate human review defined before AI outputs are relied upon?

Review requirements depend on the use case and possible impact on people or processes. (Area: Quality)

Yes Partly No

08Is there a process for checking facts, sources, calculations, and conclusions produced by AI?

Especially before outputs inform decisions or external communications. (Area: Quality)

Yes Partly No

09Is it clear when material AI use and related decisions must be documented?

Documentation supports traceability, oversight, and incident review. (Area: Quality)

Yes Partly No

10Are owners designated to approve tools, use cases, and exceptions?

Responsibility may be shared across management, legal, privacy, IT, and business teams. (Area: Governance)

Yes Partly No

11Are vendor, security, privacy, and access risks reviewed before adopting AI tools?

Depth of review should reflect the use, data, and systems involved. (Area: Governance)

Yes Partly No

12Is there a process for reporting and handling unauthorized AI use, errors, or data incidents?

Include escalation, documentation, and remediation as appropriate. (Area: Governance)

Yes Partly No

13Is staff training tailored to actual job roles and AI uses?

Useful training covers practical examples, data rules, and output checks. (Area: People)

Yes Partly No

14Is there a clear route for questions, approvals, and reporting new AI tools?

A practical reporting route helps surface untracked uses. (Area: People)

Yes Partly No

15Are AI policies, tool inventories, and controls reviewed periodically?

Update them as tools, vendors, risks, and organizational activity change. (Area: People)

Yes Partly No

The result does not determine compliance with law, professional rules or standards. It is a preliminary AI governance mapping only.

How well is AI use governed in your organization?

Your result

Three areas to review first

Recommended next step