Stage 02 · Assessing

Discover what AI you have and what risk it carries

“AI is already in our organisation. I need to know our exposure.”

You have AI in use — possibly more than you realised. Shadow AI, third-party AI features, employee tool use. The job now is to find it all, map it against your obligations, and identify the gaps that need closing first.

Take the assessment Vendor due diligence kit

Start with these articles

Curated for people at this stage. Read in order, or pick the one that matches your specific situation.

Practical Guide 10 min read

How to Audit Your AI Systems: A Practical Framework

AI auditing is becoming a regulatory requirement in more jurisdictions, and a due diligence expectation in most others. This guide covers wh…

Practical Guide 9 min read

How to Audit Your Company's AI Tools: A Practical Step-by-Step Guide

Most organisations have more AI running in their business than anyone realises. This is the practical guide to conducting an AI tools audit …

Governance 9 min read

AI Governance Maturity: The Five Levels and How to Progress

Not all AI governance is equal. Understanding where your organisation sits on the maturity spectrum, and what the next level requires, is th…

Governance 9 min read

AI Governance Maturity Assessment: Where Does Your Organisation Actually Stand?

Most organisations believe their AI governance is more mature than it is. This structured self-assessment, used by governance advisors in en…

Practical Guide 9 min read

AI Third-Party Risk Management: The Vendor Assessment Checklist

Most organisations' AI risk comes from the AI tools they buy, not the AI they build. This is the practical vendor assessment checklist — wha…

Governance 9 min

Shadow AI: The Governance Guide for What Your Employees Are Already Using

Employees at over 90% of organisations use personal AI accounts for work. Only 37% of organisations have AI governance policies. Shadow AI i…

Previous stage

Stage 01

Exploring — Understanding AI risk before you commit

Next stage

Stage 03

Building — Designing policies, controls, and the governance programme