Identify gaps
See what is in place and what needs attention.
AI GovernanceMaturity Model
Understand how mature your organisation's AI governance really is
Our model shows a clear path from early governance through to continuous improvement.
What is AI governance maturity?
It is the capability of your organisation to govern AI use responsibly, consistently and effectively.
Key questions the model helps you answer:
- Do we know where AI is being used?
- Who owns AI governance and AI risk?
- Are AI risks, vendors and controls reviewed?
- Can leadership evidence oversight and improvement?
Why maturity matters
Prioritise action
Focus on the areas that create the most impact.
Strengthen accountability
Clarify roles, ownership and decision rights.
Evidence oversight
Build confidence with boards, regulators and stakeholders.
Track improvement
Measure progress and improve over time.
The five maturity levels
- 1
Initial
AI use is informal, fragmented or poorly understood.
- 2
Developing
Basic governance arrangements are emerging.
- 3
Defined
Core governance arrangements are documented and communicated.
- 4
Managed
AI governance is actively used, monitored and evidenced.
- 5
Optimising
AI governance is continuously reviewed and improved.
Your maturity level provides an indicative view to support discussion, prioritisation and planning.
The model covers six core domains
1. Strategy and governance
Leadership, objectives, governance structure, roles, decision rights and oversight.
2. Use-case visibility and policy
AI use-case inventory, classification, acceptable use, policy and staff guidance.
3. Risk and data governance
AI risk assessment, controls, data governance, confidentiality and information use.
4. Vendors and third parties
AI tools, vendors and third parties: due diligence, contracts and ongoing oversight.
5. People, culture and oversight
Workforce AI literacy, training, AI agents and autonomy, human oversight and escalation.
6. Monitoring, incidents and improvement
Monitoring and reporting, incident management, assurance and continuous improvement.
The full MaturityLens™ assessment uses more detailed evidence prompts and scoring across the domains.
How to use the model
- 1
As a starting point for discussion
- Align leadership and teams
- Understand current strengths and gaps
- Build a shared view
- 2
To guide improvement and decision-making
- Identify priority improvement areas
- Align activities with risk, resources and organisational goals
- 3
To support assessment and evidence
- Use as the foundation for structured assessment
- Track progress and demonstrate maturity over time
Ready to understand your AI governance maturity?
Start with a quick maturity check or go deeper with the MaturityLens™ assessment.