AI governance readiness quiz

Twelve quick questions to see how ready your organisation is to use AI responsibly.

AI governance sounds like something only banks need, until a staff member pastes a client list into a chatbot. This quiz shows where you stand in about five minutes and what to fix first.

Why use it

It gives you an honest baseline across the twelve areas that matter most.
It turns a vague worry into three concrete next steps.
It is a quick way to start the AI conversation with your leadership team.

How it works

Answer each question for how things really are, not how you hope they are.
Read the short note on why each area matters.
See your score out of 36 and your readiness level.
Start with the three suggested next steps, then retake the quiz in a few months.

Good to know

The NIST AI Risk Management Framework, released in January 2023, organises AI risk work into four functions: Govern, Map, Measure and Manage. Govern sits across the other three.
ISO/IEC 42001, published in December 2023, lets organisations have their AI management system independently certified, much as ISO/IEC 27001 does for information security.
Answer as a group. When a manager and a junior colleague score the same question differently, you have found a gap worth talking about.

Questions

Who should take this quiz?

A founder, manager or anyone responsible for operations, IT, risk or compliance. It works best when two or three people from different teams answer together.

What does a low score mean?

That AI is probably being used without much control, which is common. The first fixes, such as a register, an owner and a short policy, are quick and cheap.

Is this based on a recognised framework?

The questions draw on themes common to frameworks such as the NIST AI RMF and ISO/IEC 42001, but the quiz is a simplified self-check, not an audit or certification.

Are my answers saved?

Only on your own device, so your answers are there next time. Nothing you type is sent to us.

Please note

Provided free, as is, for general information. It is not legal, regulatory, compliance or professional advice, and it does not create a lawyer-client or adviser relationship. The score is a rough self-assessment based on your own answers and is not an audit, certification or statement of compliance with any law or standard. You are responsible for checking which rules apply to your organisation, with a qualified adviser where needed.