What AI systems and uses do we have?
Review whether there is a current inventory, accountable ownership and a defined purpose for AI use.
AI governance assessment for your organisation
Assess how your organisation manages AI across governance, risk, privacy and security. Identify gaps, record supporting evidence and assign actions for improvement.
11 questions. About three minutes. No account needed. A work email is required to receive your result.
AI governance source referencesISO 42001ISO 23894Australian AI Ethics PrinciplesPrivacy Act and APPsEU AI Act
Review AI governance before a tender, board request or assurance review requires it
How are risks assessed?
Check whether AI risks are identified, reviewed and linked to operating controls.
What evidence supports the rating?
Record evidence confidence separately so missing records remain visible.
Which obligations may apply?
Review the source information and complete the EU applicability questions where relevant.
Who owns the actions?
Assign controls and actions to the people responsible for completing them.
How will we keep the result current?
Repeat the review and track progress over time. KPI features depend on your plan.
AI governance frameworks and assessment areas
Review the practices and supporting evidence that help your organisation put AI governance frameworks into practice. The areas covered depend on what is relevant to your review.
AI management system
Set responsibilities, policies and review processes for AI use.
AI risk management
Identify AI risks and assess how they are managed.
AI ethics principles
Review fairness, transparency and accountability in AI use.
Privacy and data protection
Review how personal information is collected, used and protected.
AI adoption governance
Review how AI tools are selected, approved and introduced.
Security and model integrity
Review safeguards for AI systems, models and data.
EU applicability
Consider whether EU AI requirements may be relevant to your organisation.
EU AI Act overlay
Review additional practices where EU requirements are relevant.
Content provenance and evidence
Review how content origins and supporting records are documented.
Prepare for customer, tender and board questions
- Prepare tender and due diligence responses
- Report maturity and evidence gaps
- Assign work to the right people
- Consider EU requirements where relevant
Review AI use across the organisation
- Identify AI systems and uses across teams
- See which risks and responsibilities need attention
- Connect supporting information to each finding
- Plan follow-up work and report progress
Understand the result
See maturity and supporting evidence as separate results, so strengths and gaps are easier to understand.
Readiness bands
The band describes the assessed maturity result. It does not certify compliance or independent verification.
Not readyEarly stageDevelopingManagedMatureAdvanced
Start with a short check or run the full assessment
Complete the AI Quick Check
Step 1Answer 11 maturity questions and receive an indicative result.
Start Quick CheckRun the full assessment
Step 2Review the applicable practices, record evidence and assign responsibility.
See the assessmentKeep the result current
Step 3Repeat the review and use KPI programmes where your plan supports them.
View plansComplete the AI readiness Quick Check
Answer 11 questions in about three minutes and receive an indicative maturity result. No account is needed, but a work email is required for your result. The result is based on your own answers. It is not an independent audit.