AI Governance & Risk Controls Readiness Assessment

Welcome to the AI Governance & Risk Controls Readiness Assessment. This survey explores how AI policies, approval workflows, and risk controls function in your organization. Your responses are confidential and will be reported only in aggregate to improve governance practices. Participation is voluntary — you may stop at any time. There are no right or wrong answers; we are interested in your honest experience. Estimated time: 6–8 minutes.

Which best describes your involvement with AI tools or systems in your current role?

• I directly build or develop AI systems
• I use AI tools as part of my regular workflow
• I oversee or manage AI-related projects or teams
• I review or approve AI use (e.g., legal, risk, compliance)
• I have minimal or no involvement with AI
• Other

Does your organization have an AI policy or standard that applies to your work?

• Yes
• No
• Not sure

Briefly describe the review or approval steps you follow when using AI in your work.

Are risk tiers or categories defined for AI systems in your organization?

• Yes
• No
• Not sure

Rank the following AI governance improvements from most to least important for your organization.

1. Clarify policy and standards
2. Simplify approval workflows
3. Expand monitoring and telemetry
4. Strengthen access controls
5. Staff training and awareness
6. Vendor/third-party governance

Based on your responses in this survey, please share any additional thoughts, examples, or concerns about AI governance in your organization.

Which function best describes your primary role?

• Engineering/ML
• Product Management
• Design/UX
• Data/Analytics
• Legal/Compliance
• Security/Privacy
• Procurement/Vendor Management
• Operations
• HR/People
• Finance
• Sales/Marketing
• Other

Thank you for completing this survey. Your responses will be used in aggregate to strengthen AI governance practices across the organization.

How clear is the AI policy or standard that applies to your work?

How efficient are the current AI review and approval workflows for your work?

Which of the following criteria are used to determine AI risk tiers in your organization? Select all that apply.

• Data sensitivity or classification
• Potential impact on individuals or groups
• User reach or scale of deployment
• Regulatory or legal exposure
• Model autonomy level
• Business criticality
• Not sure
• Other

We'd like to explore a few of your responses in more depth. An AI moderator will ask you 1–2 brief follow-up questions.

What is your seniority level?

• Individual contributor
• Manager
• Senior manager
• Director
• VP
• C-level/Founder
• Prefer not to say

Which policy area most needs clearer guidance?

• Scope and definitions
• Approved use cases
• Data handling and retention
• Human review requirements
• Third-party AI/vendor use
• Recordkeeping and documentation
• Incident reporting and escalation
• Model testing and validation
• Access and permissions
• Other

I know when to escalate AI-related decisions to the appropriate oversight function (e.g., risk, legal, privacy, or security).

How established is bias and fairness testing for AI systems where you work?

How long have you been with your current organization?

• Less than 6 months
• 6–12 months
• 1–2 years
• 3–5 years
• 6–10 years
• 11+ years
• Prefer not to say

How established is ongoing performance monitoring for deployed AI systems where you work?

Which region do you primarily work in?

• Africa
• Asia-Pacific
• Europe
• Latin America
• Middle East
• North America
• Prefer not to say

How established are access controls and permissions for AI systems where you work?

How established is audit logging and documentation for AI systems where you work?

Do you know how to report an AI-related incident or near-miss?

• Yes
• No
• Not sure

Approximately how many AI-related issues or near-misses have you observed in the past 12 months?

• 0
• 1–2
• 3–5
• 6–10
• More than 10
• Not sure