Question 1

There is no written policy on what AI can and cannot be used for

Accepted Answer

This is a sign your governance dimension needs attention. Ethics, policy, and risk management. No AI policy means no trust — and one unreviewed output shared externally is a reputational risk you can prevent.

Question 2

AI-generated content is shared externally without a mandatory review step

Accepted Answer

This is a sign your governance dimension needs attention. Ethics, policy, and risk management. No AI policy means no trust — and one unreviewed output shared externally is a reputational risk you can prevent.

Question 3

No named person is responsible for AI risk or policy

Accepted Answer

This is a sign your governance dimension needs attention. Ethics, policy, and risk management. No AI policy means no trust — and one unreviewed output shared externally is a reputational risk you can prevent.

Question 4

AI incidents have no defined reporting or escalation process

Accepted Answer

This is a sign your governance dimension needs attention. Ethics, policy, and risk management. No AI policy means no trust — and one unreviewed output shared externally is a reputational risk you can prevent.

Question 5

What is step 1 to improve your governance dimension?

Accepted Answer

Write a one-page acceptable use policy — what AI can do, what needs review, what is off-limits

Question 6

What is step 2 to improve your governance dimension?

Accepted Answer

Define a mandatory human review step before any AI output is shared externally

Question 7

What is step 3 to improve your governance dimension?

Accepted Answer

Assign one named AI owner with explicit responsibility for governance

Do you have AI guardrails?

Four signs you have a governance gap

Three first actions

Get your scored Governance report