← All readiness checks
Answer for where you are today. "Not sure" is a fine answer: it shows up as something to find out.
1. Do you keep an inventory of AI systems you build or use, including third-party AI?
2. Is there an approved AI policy with named owners for AI risk?
3. Do you classify AI systems by risk, including EU AI Act categories where they apply?
4. Do you assess impacts on people before deploying an AI system?
5. Do you document training data sources, quality and rights to use it?
6. Do you test for accuracy, bias and robustness before release, and monitor after?
7. Are people told when they interact with AI, with human oversight for high-impact decisions?
8. Do you assess AI vendors' terms, data use and controls?
9. Is there a process for AI incidents and for changes to models?
See my readiness score