Free · Private · 5 minutes

Governance Readiness Assessment

Answer based on what is consistently true today—not what is planned. Your score is calculated in your browser and is not submitted.

1. Information and data assets are inventoried.
2. Each important information or data asset has an accountable owner.
3. Information is classified by sensitivity and business value.
4. Retention and secure disposal rules are defined and followed.
5. AI tools and use cases are recorded in a shared inventory.
6. AI uses are assessed according to clear, proportionate risk criteria.
7. Staff have practical guidance on acceptable AI use.
8. AI and data vendors are assessed before sensitive information is shared.
9. People know how to report an AI, data or information incident.
10. High-impact AI outputs receive meaningful human review.
11. Governance decisions, exceptions and approvals are documented.
12. Leadership reviews governance risks and progress on a regular cadence.
0%

Readiness level:

Recommended next step: