AI Governance Assessment

Governance Maturity Self-Assessment

Eight statements mapped across four maturity levels — Ad Hoc, Defined, Managed, and Optimized. Rate your current state honestly to receive a maturity level, identified gaps, and targeted improvement actions.

1) Your organization has a documented, approved AI governance policy.

2) Accountability for AI decisions and outcomes is clearly assigned to named roles.

3) AI-related risks are formally assessed, documented, and tracked in a risk register.

4) Employees receive formal AI ethics, governance, or responsible AI training.

5) AI vendor selection and procurement includes a formal AI-specific risk review.

6) AI system outputs are periodically audited for bias, accuracy, and policy compliance.

7) AI governance practices align to regulatory or compliance requirements (e.g., GDPR, HIPAA, NIST AI RMF, EU AI Act).

8) A continuous improvement cycle exists to update governance policies as AI evolves.

Related Resources

The Four Maturity Levels

Ad Hoc — reactive, unstructured
Defined — policies exist, inconsistently applied
Managed — formal, monitored, measurable
Optimized — continuous improvement, embedded