Do you know exactly where you stand with AI governance?

We walk the entire company, identify risks and give you a clear plan for what to do next.

What the AI Governance Assessment is

Expert-led review. 10 domains, 80 controls. Evidence-based — not a questionnaire self-assessment. Led by a senior assessor.

What the assessment is NOT

  • Not an IT audit or SOC 2
  • Not a penetration test
  • Not a legal opinion
  • Not a paper compliance checklist

The 10 domains we cover

GOV

Governance & Accountability

Critical
INV

AI Inventory & Visibility

Critical
DAT

Data Governance for AI

Critical
SEC

Security & Access Control

Critical
USE

Responsible Use & Human Oversight

Critical
RSK

AI Risk Management

VEN

Vendor & Third-Party AI

TRN

Training & Awareness

INC

Incident Response for AI

DOC

Documentation & Evidence

How the assessment runs

  1. 1Scoping

    45-minute call. We define scope, stakeholders, timeline and outputs.

  2. 2Intake

    Access to the GovReady platform. Upload of kick-off documents.

  3. 3Questionnaires

    Structured questions across 10 domains, filled in by stakeholders.

  4. 4Evidence review

    Upload and verification of proof — policies, contracts, audit logs.

  5. 5Scoring & findings

    Maturity scoring per domain plus critical findings with impact.

  6. 6Report & presentation

    Final report, roadmap, presentation to leadership and board.

What you get

Assessment Report with maturity scoring, domain findings and a 12-month roadmap. If the company qualifies, we issue a Readiness Statement.

How much it costs

Three tiers — from first overview to enterprise scope.

AI Governance Assessment · GovReady