Chicago, IL(312) 376-0002Contact
Cogent Assurance

Resources / Reference

AI Governance Scorecard

Answer 15 questions and get an instant maturity score, your weakest area, and where to start.

Prepared by the Cogent Assurance team

How it works

Answer each question honestly. Your score is calculated instantly in your browser, nothing is sent or stored, and the questions follow the NIST AI Risk Management Framework’s Govern function and the management system requirements of ISO/IEC 42001.

Policy and ownership

We have a written AI acceptable use policy that staff know about.

A named person or committee is responsible for AI decisions.

New AI tools must be approved before staff use them.

Inventory

We keep a current list of the AI tools and AI features in use.

We know which vendors have added AI features to software we already use.

We know which AI tools receive personal or confidential data.

Risk and testing

Each AI use is assigned a risk level.

High-risk AI systems are assessed before launch.

We test important AI systems for accuracy and fairness.

Data and vendors

Our contracts stop vendors from training on our data.

We have clear rules about what data can go into AI tools.

Our privacy notice reflects how we share data with AI vendors.

People and response

Staff have been trained on safe AI use.

Our incident response plan covers AI failures and data exposure.

Leadership or the board receives regular reports on AI.

This page is general information for planning purposes. Laws and guidance change, so confirm current requirements before acting. It is not legal advice. For legal advice about your organization, consult a licensed attorney.

Talk through your AI and privacy questions

Tell us what you're working on, and we'll reply within one business day.

Schedule a consultation