Put the basics of AI governance in place
Work out what AI your organisation uses, how much risk you'll accept and where the gaps are. You'll leave with your results, a draft charter, a 90-day plan and a report for your leadership team. It's a starting point and doesn't assess regulatory readiness.
First results take about 30 to 45 minutes. A full draft for your leadership team takes about 60 to 120 minutes, usually over two sittings. Your answers save as you go.
Free, with no sign-up. Your answers stay in this browser unless you choose to share them.
What you'll leave with
- Your results: a one-sentence headline, your next five actions and where the gaps are
- A report for your leadership team to preview, print or save as a PDF
- A draft charter and a 90-day plan you can keep editing
- Your AI register, risk register and 90-day plan as CSV files
- A backup file (.json), so you can carry on elsewhere or pass the work to a colleague
The nine steps
- What AI does your organisation use?
- How much AI risk will you accept?
- How mature is your AI governance today?
- Score your riskiest uses of AI
- Who owns what?
- Check the AI you buy
- Choose your first five controls
- Your charter and 90-day plan
- Your results and report
What you'll need
A rough list of the AI tools and features people use, including AI built into products you buy. It helps to know who looks after each one, but 'Unknown' is a useful answer.
Who this is for
Anyone who has just been handed AI governance on top of another job, in risk, technology, data protection, compliance or operations. You don't need to be an AI specialist.
Mapped to NIST AI RMF, ISO/IEC 42001 and the EU AI Act where a framework reference applies.
Built by Oliver Nowak, who writes The Digital Iceberg on AI strategy and governance.