AI Governance Checklist for Organisations

Use this checklist to review the basic arrangements your organisation may need for responsible AI adoption. It is a starting point, not a certification.

Checklist themes

• Ownership — Is it clear who owns AI governance, AI risk and decision rights?
• Policy — Is acceptable, restricted and prohibited AI use defined and communicated?
• Inventory — Do you know where AI is used, by whom, and for what purpose?
• Risk and controls — Are AI-related risks identified, assessed, treated and monitored?
• Vendors — Are third-party AI tools and suppliers reviewed before use?
• Evidence — Can leadership show oversight, training, incidents and review activity?

How to use the checklist

Work through the themes with the people closest to AI use, risk, technology and governance. Note what exists, what is unused, and what is missing. Then download the Starter Pack to begin creating artefacts, or take the Maturity Check for an indicative view.