Self-assessment

AI Governance Readiness Check

Eight questions on how your organisation governs its use of AI. You will get an indicative view across four areas and suggestions for where a closer look may help.

8 questions
About 3 minutes
No sign-up or contact details

Your answers are used only to calculate your results. They are not stored and are not linked to you. See our privacy notice.

Question 1 of 8

Does your organisation keep an up-to-date inventory of the AI systems and AI-enabled tools it develops, buys or uses?

Include AI features built into software you already use.

Established Partially established Not established Not sure

Is there a defined process for proposing, reviewing and approving new AI use cases before they go live?

For example, a request form and a named group or person who signs off.

Established Partially established Not established Not sure

Does each AI system have a named owner who is accountable for how it is used and for its risks?

Established Partially established Not established Not sure

Are AI-specific risks, such as inaccuracy, bias or misuse, assessed before an AI system is deployed?

Established Partially established Not established Not sure

Are security and privacy reviews part of how AI systems and tools are introduced?

For example, data protection impact assessments, supplier reviews or security testing.

Established Partially established Not established Not sure

Are there defined points where people review, approve or can override AI outputs or actions?

Established Partially established Not established Not sure

Once in use, are AI systems monitored for performance, incidents and changes in behaviour?

Established Partially established Not established Not sure

Has your organisation assessed which regulations and standards apply to its AI use, such as the EU AI Act or ISO/IEC 42001?

Including whether an AI management system is needed or already in place.

Established Partially established Not established Not sure

Your indicative results

AI governance readiness

Preliminary and self-reported. These observations are based only on your answers. They are not an audit, a compliance assessment or legal advice, and they do not confirm compliance with the EU AI Act, ISO/IEC 42001 or any other requirement.

Indicative readiness score

0/100

Four areas

Visibility & accountability
Governance & risk
Security & human oversight
Monitoring & regulatory readiness

EarlyDevelopingMaturingStrong

Areas for further assessment

AI system visibilityA complete view of the AI systems in use is the starting point for most other governance decisions.
AI use-case approvalA consistent route for proposing and approving AI use helps keep decisions accountable.
Ownership and accountabilityClear ownership makes it possible to act on risks, incidents and changes.
AI risk assessmentAssessing AI-specific risks before deployment helps decide which controls are needed.
Security and privacyAI tools can introduce new data flows and exposures that standard reviews may not cover.
Human oversightDefined review and intervention points keep people accountable for AI-supported outcomes.
Post-deployment monitoringAI systems can behave differently over time; monitoring shows when that happens.
Regulatory and standards applicabilityKnowing which requirements apply clarifies what controls and evidence are expected.

A possible next step

Want to talk it through?

If you would like to discuss these observations, Łukasz can go through them with you and suggest a sensible next step. There is no obligation.

Add a short summary of these results to my message. You can edit it before sending.

Discuss your project Explore all engagements

Scores are indicative and combine your answers across the four areas. “Not sure” is treated as not yet evidenced. Your results stay in this browser tab and are cleared when you leave or reload the page.