Services
AI Governance Readiness Assessment: is your organisation ready to deploy and govern AI responsibly?
Our AI Governance Readiness Assessment gives leadership teams a clear, honest picture of where they stand, the critical gaps to close, and a practical plan to close them.
Discuss your organisation → See what you receive
- Executive assessment — Where you stand today, in plain language
- Prioritised recommendations — What to fix first, and why
- 90-day action plan — Practical next steps your team can own
Why it matters
Why AI governance matters now
Teams are adopting AI tools, building pilots and automating decisions, often before anyone has defined who is accountable, which data can be used, or how outcomes are checked.
Boards, clients, investors and regulators are starting to ask the same questions. The organisations that answer with confidence are the ones that know where their gaps are before someone else finds them.
- Where are we using AI? — Do we have a complete view of our use cases?
- Who is accountable? — Are roles and decision rights clear?
- Is our data handled properly? — Quality, privacy and appropriate use
- Can a human step in? — Is there real oversight when it matters?
The assessment
Five areas of AI governance we review
We look at how AI is actually used across your organisation, not just what is written in policy.
AI use cases
Where AI is used or planned, what it decides, and how much risk each use carries.
Policies
Whether your rules for AI exist, are clear, and are followed in practice.
Accountability
Who owns each system, who approves it, and who answers when something goes wrong.
Data practices
How data is sourced, protected, quality-checked and used to train or run AI.
Oversight
How outcomes are monitored, and how people can review, challenge or stop a system.
What you receive
What you receive: assessment, priorities and a 90-day plan
Executive assessment
A concise view of your current AI governance maturity, written for leadership.
- Strengths to build on
- Critical gaps and their impact
- Overall readiness picture
Prioritised recommendations
Not a long wish list: the actions that matter most, in the right order.
- Ranked by risk and effort
- Linked to each gap found
- Owners suggested for each item
90-day action plan
A practical roadmap your team can start on immediately.
- Quick wins for the first weeks
- Clear milestones to 90 days
- Foundations for longer-term governance
International standards and regulation
Informed by ISO/IEC 42001, NIST AI RMF and the EU AI Act
ISO/IEC 42001 AI MANAGEMENT SYSTEM
The international standard for establishing, maintaining and improving an AI management system. It helps structure how governance is organised and evidenced.
NIST AI RMF RISK MANAGEMENT
The NIST AI Risk Management Framework, a widely used reference for identifying, measuring and managing AI risks across the system lifecycle.
EU AI Act REGULATION
The European Union's risk-based law on artificial intelligence. It sets obligations by risk tier and by role, such as provider or deployer, and can apply to organisations outside the EU. Read our EU AI Act series
The assessment is informed by these standards and regulation to help you prepare. It is not a certification audit or legal advice.
How it works
How the AI governance assessment works
Initial conversation
We discuss your goals, your AI landscape and the scope that fits your organisation.
Discovery
We review documents and speak with the people who build, buy and use AI.
Assessment
We map findings across the five areas and identify the critical gaps.
Executive briefing
We present the assessment, recommendations and 90-day plan to your leadership.
Who it's for
Who the assessment is for: leadership teams
A good fit if you are…
- Scaling AI beyond a few pilots and need structure before it spreads further
- Facing questions from your board, clients or investors about how AI is governed
- Preparing for ISO/IEC 42001 or for obligations under the EU AI Act
- Unsure who owns AI decisions, risks and data across teams
Led by Yasser El Hardouz — Founder, AISetApp · AI Transformation & Governance Specialist. 15+ years across technology, telecoms, education and the public sector, working with Fortune 500 companies and government programmes.
More ways we help
More AI services: deployment, compliance readiness and training
AI Deployment
Support to choose, roll out and scale AI tools that fit your business, with the right controls from the start.
Compliance Readiness for AI Builders
For startups and SMBs building AI products: prepare the documentation and evidence investors and auditors expect.
Training
Practical sessions that help leaders and teams adopt AI with confidence and use it responsibly.
Questions
AI governance assessment FAQ
Is this a certification audit?
No. The assessment is informed by ISO/IEC 42001, NIST AI RMF and the EU AI Act to show you where you stand and what to prepare. Certification itself is carried out by accredited bodies.
Does the assessment cover the EU AI Act?
Yes. We look at how your AI use cases may be classified under the EU AI Act's risk tiers, which role your organisation plays (for example provider or deployer), and which obligations may apply. It is not legal advice.
Do we need to be using a lot of AI already?
No. The assessment is useful whether you are running early pilots or using AI across several teams. Starting early is often the easiest time to get governance right.
Who should be involved on our side?
Typically a leadership sponsor plus the people who own AI use cases, data, risk or compliance, and IT. We agree the right group during the initial conversation.
What happens after the 90-day plan?
Your team can run with the plan independently, or we can support implementation, training or a follow-up review.
Know where you stand. Know what to do next.
Message us to discuss your organisation's needs and whether the AI Governance Readiness Assessment is the right fit.